Brandes Associates Inc. · 2 days ago
Information Security Analyst (ISA)
Brandes Associates Inc. is a defense contractor seeking a highly skilled Cyber Accreditation Specialist for Department of Defense programs. The specialist will develop, coordinate, and maintain cyber accreditation packages, ensuring compliance with federal cybersecurity guidelines and supporting Navy information systems security.
ConsultingInformation TechnologySoftwareSoftware Engineering
Responsibilities
Cyber Accreditation Package Development Develop and maintain RMF artifacts, including System Security Plans (SSP), generate & control implementation evidence, inheritance maps, and POA&Ms
Coordination and Compliance Coordinate with Authorizing Officials (AO) and Information System Security Managers (ISSM) to define an Authority to Operate (ATO) plan, develop an interim risk acceptance strategy, and manage control inheritance from enterprise services and range systems
Reference Compliance Ensure that all activities and documentation are compliant with the latest DoD and federal cybersecurity standards, such as DoDI 8510.01 Risk Management Framework (RMF), NIST SP 800-53 Rev. 5, NIST SP 800-171 (CUI), DoD Zero Trust Reference Architecture, DoD Cloud Security Requirements Guide (SRG) / FedRAMP baselines (aligned to IL5 unless otherwise directed)
Qualification
Required
3+ years of experience in cybersecurity, specifically in the development and coordination of cyber accreditation packages
Demonstrated experience with RMF, SSP development, and POA&M management
Familiarity with DoD and federal cybersecurity guidelines, including DoDI 8510.01, NIST SP 800-53 Rev. 5, NIST SP 800-171, DoD Zero Trust Reference Architecture, and DoD Cloud SRG/FedRAMP baselines
Strong analytical and problem-solving skills
Ability to effectively coordinate and communicate with various stakeholders, including AO, ISSM, and other cybersecurity professionals
Current Security+ Certificate
IAM Level 2 as per DoD Directive 8570.01; and experience working with the DIACAP/Risk Management Framework processes
Excellent communication and interpersonal skills—verbal, non-verbal, written, and listening—for staff, customer and organizational level communications, both formal and informal
Ability to work independently, self-starter
Working knowledge and use of Microsoft Office suite programs, MS Word, Excel, Access, and PowerPoint
BS or BA degree in Cybersecurity, Information Technology, or a related field
The applicants selected will be subject to a security investigation and must meet and sustain eligibility requirements for access to controlled and classified information
The applicant must have US citizenship at the time of application
Preferred
Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), or equivalent certification
Experience with cloud security and FedRAMP compliance
Benefits
Opportunities for career advancement
Excellent benefits
Stability