IT Compliance Analyst
Client Solution Architects (CSA) is seeking an IT Compliance Analyst to join our growing company in support of our Navy client onsite at our Pensacola, FL location. We are looking for someone to Provide Support utilizing the RMF Process Guide (Security Plan Approval, Security Assessment Plan (SAP) Approval, System Assessment Report (SAR) Approval, Security Assessment Package Approval, and Continuous Monitoring) for several ATO packages.
For nearly 50 years, CSA has delivered integrated technology and operational support services to meet the defense and federal sector's most complex enterprise needs. Working from operations centers and shipyards to training sites and program offices, CSA deploys experienced teams, innovative tools and proven processes to advance federal missions.
How Role will make an impact:
- This person will provide package support per Naval Education and Training Commands continuous monitoring guidance.
- Establish periodic meetings/Meet with NETC Cyber RMF Team to discuss RMF timelines, tasks, and deliverables
- Maintain eMASS Record
- Maintain Key artifacts (Package hardware/software lists, diagrams, etc).
- Maintain other artifacts required by RMF/eMASS( Categorization Form, Contingency Plan (CP), Disaster Recovery Plan (DRP),Incident Response Plan (IRP), Vulnerability and Patch Management Plan, Privacy Impact Assessment (PIA), System Level Continuous Monitoring (SLCM) Strategy)
- Ensure MONTHLY Scans are conducted per SCA Testing Guidance
- Ensure all assets in Hardware are scanned, and credentialed
- Process scans utilizing the eMASSter tool
- Ensure all applicable STIGS are conducted for all assets in the Hardware List
- Ensure all QUARTERLY updated applicable STIGs from DISA website are implemented
- Review findings and associate each with applicable affected security control;
- Update POAM items (See POAM Section) Web Risk Assessment (WRA) Scan (if applicable) ATO Modifications (Use Case)