Job Description
Responsibilities:
- Perform duties in tasks in support of maintaining System Security Plans (SSPs), Risk Assessment Reports (RARs), and Plans of Action and Milestones (POA&Ms).
- Perform regular self-assessments and internal audits to ensure the system maintains its Authorization to Operate (ATO).
- Maintain and update supporting Governance, Risk, and Compliance (GRC) assets in the customer's GRC tools.
- Coordinate with technical teams to track the remediation of vulnerabilities identified in scans (e.g., Nessus, ACAS).
- Help develop and deliver security awareness materials to staff, ensuring a culture of security throughout the organization.
- Work with various stakeholders to ensure the systems meet their continuous monitoring requirements and metrics.
- Identify "bottlenecks " in our current security wor...