RiseMe
FEDITC logo
FEDITC Verified
Information Technology & Services

Information Assurance Analyst, SME

Indianapolis, INOnsiteFull TimePosted 11 days agoVisa sponsorship available

Is this role right for you?

Upload your resume and get a skill-by-skill breakdown — see exactly where you match, where you're close, and what to highlight. Not a mystery percentage.

Get a tailored resume highlighting what this role needs.

Required skills

  • United States Citizenship
  • eMASS
  • DoD RMF
  • NIST SP 800-37
  • NIST SP 800-53
  • FISMA
  • FISCAM
  • SSAE
  • POA&Ms
  • ATO

Nice to have

  • CAP
  • CASP+
  • Xacta
  • Archer
  • JWICS
  • DFAS financial system

Role summary

FEDITC seeks an Information Assurance Analyst, SME to lead cybersecurity compliance and Risk Management Framework (RMF) accreditation for the DFAS Common Computing Environment (CCE). This role requires subject matter expertise in Assessment & Authorization (A&A), FISMA compliance, and audit support to maintain continuous Authority to Operate (ATO). Responsibilities include leading IA staff, managing A&A packages in eMASS, overseeing FISMA compliance, coordinating audits, ensuring ATO/ATC package currency, directing continuous monitoring, and managing POA&Ms. A Top Secret SCI clearance and US Citizenship are mandatory. The position requires 10+ years of experience in DoD/Federal environments.

FEDITC, LLC is a fast-growing business supporting DoD and other intelligence agencies worldwide. FEDITC develops mission critical national security systems throughout the world directly supporting the Warfighter, DoD Leadership, & the country. We are proud & honored to provide these services.

Overview of position:

FEDITC is seeking an Information Assurance Analyst, SME to lead cybersecurity compliance and Risk Management Framework (RMF) accreditation operations for the DFAS Common Computing Environment (CCE). This position provides subject matter expertise in Assessment & Authorization (A&A), FISMA compliance, and audit support to ensure the CCE maintains continuous Authority to Operate (ATO).

A United States Citizenship and an active Top Secret SCI DoD Security Clearance is required to be considered for this position.

On-site presence required at designated location

Responsibilities

  • Lead and supervise Information Assurance staff delivering RMF compliance and accreditation support for the DFAS CCE
  • Direct Assessment & Authorization (A&A) activities under DoD Risk Management Framework (RMF) using eMASS
  • Manage FISMA compliance including annual control testing, documentation, and reporting
  • Oversee preparation and maintenance of all RMF artifacts including Security Plans, Control Validations, POA&Ms, and Acceptance of Risk documentation
  • Coordinate support for FISCAM audits, DFAS internal audits, and SSAE attestations
  • Ensure ATO/ATC packages remain current and compliant for all CCE mission systems (cloud and on-premises)
  • Direct continuous monitoring activities including vulnerability scan review, patch management compliance, and IAVA tracking
  • Lead POA&M management, root cause analysis, and remediation coordination
  • Coordinate with DFAS CIO validator and ISSM on all RMF actions and compliance requirements
  • Develop and maintain IA documentation including policies, procedures, and audit evidence
  • Ensure 100% RMF certification maintenance and 95%+ FISCAM control pass rates

    • Required Experience/Skills:

  • Minimum 10 years of information assurance experience in DoD or Federal environments with increasing responsibility
  • Expert knowledge of DoD RMF (DoDI 8510.01), NIST SP 800-37, and NIST SP 800-53 security controls
  • Demonstrated experience managing A&A packages in eMASS
  • Experience supporting FISMA compliance programs and federal cybersecurity audits (FISCAM, SSAE)
  • Strong knowledge of continuous monitoring, vulnerability management, and POA&M processes
  • Experience with security control assessments and validation methodologies
  • Understanding of DoD IT security policies, DISA STIGs, and compliance frameworks
  • Experience coordinating with Authorizing Officials, ISSMs, and security validators
  • Proven ability to lead compliance teams and manage multiple concurrent authorization packages
  • Ability to support COOP exercises and emergency operations

    • Preferred Qualifications:

  • CAP, CASP+, or equivalent RMF certification
  • Experience with FISCAM audit support and IT general controls testing
  • Xacta, Archer, or similar GRC platform experience
  • Experience with classified system (JWICS) accreditation
  • DFAS or DoD financial system RMF/IA experience
  • Experience achieving two-year or extended ATO packages

    • Education:

  • BA/BS Degree

    • Certifications:

  • 722 ISSM Advanced certifications (CISSP, CISM, or equivalent)
  • Computing Environment (CE) certification required for privileged access roles
  • Must obtain and maintain all mandatory DoD 8140 certifications

    • Clearance:

  • Active Top Secret/ SCI clearance is required.
  • Must be a United States Citizen and pass a background check.
  • Maintain applicable security clearance(s) at the level required by the client and/or applicable certification(s) as requested by FEDITC and/or required by FEDITC’S Client(s)/Customer(s)/Prime contractor(s).

    • FEDITC, LLC. is committed to fostering an inclusive workplace and provides equal employment opportunities (EEO) to all employees and applicants for employment. We do not employ AI tools in our decision-making processes. Regardless of race, color, religion, sex (including pregnancy), sexual orientation, gender identity or expression, national origin, age, disability, genetic information, marital status, amnesty, or status as a covered veteran, FEDITC, LLC. ensures that all employment decisions are made in accordance with applicable federal, state, and local laws. Our commitment to non-discrimination in employment extends to every location in which our company operates.

    Ready to apply?
    You'll be redirected to FEDITC's application page.

    Similar roles

    See how RiseMe works

    Match, tailor, and prep so you send fewer applications and land more interviews.