Job Description
Serve as the primary cybersecurity point of contact for assigned DoD Information Systems (IS), overseeing day-to-day security operations, maintenance, and continuous monitoring. Collaborate with the Information System Security Manager (ISSM), System Owner (SO), and other stakeholders to ensure system compliance and readiness. Engage and coordinate with senior government leaders, civilian personnel, and uniformed service members to communicate cybersecurity requirements, address compliance issues, and support mission objectives.
Develop, maintain, and update all RMF authorization and GRC documentation, ensuring alignment with NIST SP 800-53 Rev. 5 controls. Manage system accreditation data and reporting in eMASS (Enterprise Mission Assurance Support Service), accurately tracking vulnerabilities, POAMs, and authorization status. Oversee implementation and validation of technical and procedural security controls, coordinating and supporting security control assessments, vulnerability scans (ACAS/Nessus), and annual reviews per Continuous Monitoring (ConMon) requirements. Maintain and track Plans of Action and Milestones (POAMs), managing minor workflow submissions and coordinating for government approval. Translate technical requirements from DISA STIGs and Security Requirements Guides (SRGs) into actionable implementation statements for NIST SP 800-53 Rev. 5 compliance. Support cloud RMF efforts, applying knowledge of IL4/IL6 environments and DoD cloud security guidance (AWS, Azure, or equivalent). Provide subject matter expertise (SME) on cybersecurity compliance, risk management, and vulnerability mitigation. Assist with cybersecurity inspections, audits, and sustainment activities to maintain the systemβs Authorization to Operate (ATO).
About LMI
LMI is a new breed of digital solutions provider dedicated to accelerating government impact with innovation and speed.