Responsibilities:

The Mid-Level Expert is responsible for working with the Program Director to ensure all security assessments, updates, recommendations, and implementations are completed a planned
Provide cybersecurity consultancy support to Federal agencies, performing security program analysis, identifying opportunities for program improvement to reduce risk and increase compliance
Develop processes, procedures, templates, and training to support efforts aligned with the NIST Risk Management Framework (RMF)
Support Security Assessment and Authorization (SA&A) activities throughout the System Design Life Cycle (SDLC) process, including performing risk analysis and providing risk management guidance to support the remediation of vulnerabilities identified during Software Assurance, Continuous Monitoring, and Security Testing and Evaluation (ST&E)
Provide security engineering guidance to development and operations teams (e.g., secure configuration, vulnerability management, incident handling, and contingency planning)
Provide documentation development support for system security artifacts (e.g., Privacy Impact Assessment [PIA], Security Impact Analysis [SIA], System Security Plan [SSP], Contingency Plan [CP], Plans of Actions and Milestones [POA&M], and Authority to Operate [ATO] packages)
Support oversight of agency’s SA&A activities, including maintaining systems’ security inventory and related artifacts in the agency’s Governance Risk and Compliance (GRC) tool
Document and delivers status reports, meeting agendas/minutes, presentations, IT security metrics, etc
Review security and privacy legislation, policies, procedures, guidance, and NIST draft publications to provide feedback and plan for agency implementation
Establish goals and plans to meet project and mission objectives
Reviews, analyzes, and evaluates policies, guidelines, clauses and rules
Documents security requirements, and helps implement them throughout the assigned effort identified systems/GSS
Servers s the Lead Security Subject Matter expert for the Team and work effort
Incumbents function as a liaison between IT and users and have both business and technical expertise
Works on advanced, complex technical projects or business issues requiring state of the art technical or industry knowledge
Works autonomously
Goals are generally communicated in solution or project goal terms
Provide a leadership role for the work group through knowledge in the area of specialization
Delivery weekly and monthly reports
Reports directly to the Program Director and RELI CISO

Requirements:

At least one professional security certification (e.g., CISSP, CISA, CAP, GSEC, or Security+) - CAP preferred
At least 3 years of experience in information security, with a concentration in RMF support
Knowledgeable in FISMA, NIST RMF, NIST SP 800 Series, and industry leading Software Assurance, Vulnerability Analysis, and GRC tools
Effective verbal and written communication skills. Should be able to adapt communication style to suit different audiences (e.g., technical/non-technical)
Extensive experience in analyzing and implementing security requirements at all levels
Expertise in developing options and presentations
Involved in the design, development, and testing Systems to Requirements
Ability to lead teams through security implementations
Highly detailed focused
Excellent organization skills

EEO Employer

RELI Group is an Equal Employment Opportunity / Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to race, color, national origin, ancestry, citizenship status, military status, protected veteran status, religion, creed, physical or mental disability, medical condition, marital status, sex, sexual orientation, gender, gender identity or expression, age, genetic information, or any other basis protected by law, ordinance, or regulation.

HUBZone

RELI Group is an established

Vaccine for COVID-19

All RELI Group employees and contractors must be fully vaccinated against the COVID-19 virus or have an approved exemption for a doctor-verified reason or a sincerely-held religious belief. Employment with RELI Group and/or engagement with the Company as a contractor is contingent upon providing proof of COVID-19 vaccination or exemption approved by the Company.

hLkgiyWCsB

RELI Group, Inc.

About Us

New Jobs

Sr. Information System Security Officer (ISSO)

Information Systems Security Officer (ISSO)