This position is full time onsite at Scott AFB, IL. Given the classified nature of the work, there is no opportunity for hybrid or remote work.
This position is contingent upon contract award.
As the Information Assurance Manager, you will:
- Manage the Information Assurance Vulnerability Management (IAVM) program across three operational sites and a systems integration lab.
- Receive and process USCYBERCOM and Air Force cyber orders, including TASKORDs, OPORDs, CTOs, TCNOs, MTOs, Cyber NOTAMs, and SPINs; determine what applies to the network and track mitigation to completion.
- Run weekly vulnerability scans with ACAS, track remediation, and provide the recurring security compliance report to the Government ISSM and engineers.
- Maintain compliance reporting in DISA VMS and CMRS and in the Air Force AFNETOPS Compliance Tracker.
- Develop and maintain RMF artifacts in eMASS with the Government ISSM, SCAR, and Security Control Assessor to obtain and maintain the network's Authority to Operate.
- Manage the IT investment record in ITIPS in accordance with Air Force policy.
- Perform first responder scans, network defense incident reporting, and post-notification investigation.
- Advise the Program Manager, Government engineers, COR, ISSM, and ISSO on RMF and cybersecurity compliance.
- Active DoD SECRET clearance
- ISC2 Certified Information Systems Security Professional (CISSP)
- DoD 8140/8570 IAM Level II certification.
- BA/BS and 7+ years of DoD information assurance or cybersecurity compliance experience. Additional experience may be considered in lieu of degree.
- Hands-on ACAS (Tenable/Nessus) scanning, analysis, and remediation tracking.
- Experience developing eMASS artifacts and maintaining an ATO package.
- Experience processing DoD cyber orders and reporting compliance through VMS, CMRS, or ACT.
- Experience taking a system through a full ATO reauthorization.
- Experience managing an ITIPS record under DAFI 17-100.
- Familiarity with Air Force cybersecurity service providers, including AFNOC/NOD, 26 NOG Det 2, and AFCERT.
- Experience automating STIG compliance and vulnerability reporting.
Skills Required
- Active DoD SECRET clearance
- ISC2 CISSP certification
- DoD 8140/8570 IAM Level II certification
- BA/BS or equivalent experience with 7+ years DoD IA or cybersecurity compliance experience
- Hands-on ACAS (Tenable/Nessus) scanning, analysis, and remediation tracking experience
- Experience developing eMASS artifacts and maintaining an ATO package
- Experience processing DoD cyber orders and reporting compliance via VMS, CMRS, or ACT
- Knowledge of RMF processes and producing recurring security compliance reports
- Experience maintaining IT investment records in ITIPS per Air Force policy
- Ability to perform first responder scans, incident reporting, and post-notification investigation
- Experience with DISA VMS, CMRS, or AFNETOPS Compliance Tracker
What We Do
GCyber was founded to create innovative information technology solutions for the federal, state, and commercial markets. GCyber engineers have provided professional services supporting the information technology industry for over 15 years. Along with our engineering staff, we have relationships with partners, vendors, and analysts who have specialized expertise in the federal market. GCyber’s broad experience, focus toward execution with measurable results, and commitment to innovation provide responsive and long-lasting solutions to our customers. It is the mission of GCyber to always remain focused on our customer’s goals and improving their existing landscape. Our company accomplishes this by focusing on opportunities for innovation, while remaining mindful of industry successes and failures in the deployment of technologies. If your road map needs increasingly innovative solutions, GCyber can help you get there.
.png)
