Provide support to the DoD's Cybersecurity Directorate, validating that applicable programs are continuously documented, prepared, and ready for any audit at all times.
Support the Audit Readiness Program by managing the lifecycle of DoD Inspections, Assessments, and Audits that are conducted by external agencies as well as perform internal evaluations that mimic those of the external agencies.
Support the DoD's Compliance Program with assessment activities to evaluate, obtain, identify potential process improvement, maintain lessons learned, and develop after action reports to ensure remediation plans are implemented to strengthen DoD’s security posture.
Command Cyber Readiness Inspections (CCRI), Red/Blue Team engagements, and any other Cybersecurity inspections that cover a range of data center and application functions necessary to assess an organization's cyber security posture and program controls.
Responsibilities:
* Provide technical support for in-cycle and out-of-cycle compliance inspection events such as:
* CCRI/CCORI Inspections
* DODIN Assessments
* Red/Blue Team After Action Reviews
* Audit Readiness Events
* PKI Inspections
* CSSP Inspections
* Conduct mock inspections by emulating the technical and operational inspection program with technical and non-technical evaluations of the site's compliance with DoD STIGs and other applicable guidance.
* Analyze and evaluate mitigation/remedial action plans of inspected sites and systems and work with the Inspection Program Manager and appropriate DoD personnel to resolve any audit findings.
* Provide a Findings and Recommendations Package to Government Management explaining the findings, mitigation strategy, and recommendations for improvement.
* Track POA&Ms and verify that the findings are corrected.
* Submit findings and recommendations to the Lessons Learned Program.
* Coordinate and collaborate throughout the inspection lifecycle with local inspected site personnel.
* Support all audits by internal and external entities (e.
g.
, DCMA IG, United States Cyber Command (USCYBERCOM), Defense Information Systems Agency (DISA)) and remediation efforts to ensure a centralized focal point of contact is available for inspections.
* Review, update, and maintain the Cybersecurity Audit Readiness Communication Plan and deliver methods to enable DoD to effectively communicate system audit readiness requirements, schedule, and approach across the enterprise and with subscribers and requestors.
* Collect and document audit findings, mitigation strategy, and recommendations for improvement by assessments/audits in preparation for Out-brief.
* In support of inspection(s), develop, coordinate and issue guidelines and instructions for the inspection of operational support programs and systems; Audit/Inspection Guidelines.
* Provide audit support to assist with achieving and sustaining audit readiness (i.
e.
internal audits/mock inspections) to determine how well DoD is prepared for a full stage audit against a specified standard and identify common issues of compliance and how to rectify them.
* Support the coordination with other agencies to identify issues and trends impeding audit goals and objectives (i.
e.
Right-Seat-Rides, DoD Working Groups).
* Submit Findings and Recommendations Package to the Lessons Learned Program, including an executive summary of the findings, mitigation recommendations, and a Plan of Actions and Milestones spreadsheet to track deficiencies to closure.
* Maintain master project plan list for each audit of tasks to be completed.
* Create and maintain an Artifacts Repository and dashboard of all audits and supporting documentation for each.
Job Types: Full-time, Contract
Pay: $85,000.
00 - $90,000.
00 per year
Benefits:
* 401(k)
* 401(k) matching
* Dental insurance
* Health insurance
* Life insurance
* Paid time off
* Referral program
* Tuition reimbursement
* Vision insurance
Schedule:
* 8 hour shift
* Monday to Friday
Travel requirement:
* No travel
Application Question(s):
* Are you willing to work 100% ONSITE for this position?
Experience:
* Cybersecurity: 5 years (Required)
Security clearance:
* Secret (Required)
Ability to Commute:
* Fort Gregg-Adams, VA (Required)
Ability to Relocate:
* Fort Gregg-Adams, VA: Relocate before starting work (Required)
Work Location: In person
Whatsapp
