ESSENTIAL DUTIES AND RESPONSIBILITIES
Essential Duties and responsibilities include the following. Other duties may be assigned.
Develop security assessment plans, carry out technical security assessments of all selected management, operational and technical security controls, and document the results of the assessment and a concurrent risk assessment in a Security Assessment Report.
Develop POA&M Reports including all identified weaknesses, recommended actions for remediation or mitigation and provide weakness criticality ratings based on the risk assessment results.
Provide multi-discipline security administrative and technical security support to the IA RMF and Continuous Monitoring Programs.
Develop security authorization packages for newly developed systems.
Coordinate all aspects of the Assessment effort with identified points of contact, working with a high degree of independence.
Collaborate with information system owners, security officers, developers, and IT operations personnel to conduct system security categorizations.
Develop initial system security plans and contingency plans aligned with organizational policies.
Provide recommendations to organizational stakeholders for preliminary POA&M remediation and application of security engineering principles.