Senior Cybersecurity Assurance Officer

ERP International, LLC (www.erpinternational.com) is currently seeking a Senior Cybersecurity Assurance Officer supporting our DISA customer onsite at Fort Meade, MD. The Senior Cybersecurity Assurance Officer provides cybersecurity leadership, technical oversight, and DISA Task Order (DTO) management in support of mission-critical information systems and programs. The position is responsible for supporting the Risk Management Framework (RMF), Assessment and Authorization (A&A), continuous monitoring, security engineering, vulnerability management, and execution of assigned DISA Task Orders.

The Senior Cybersecurity Assurance Officer serves as a key interface between Government stakeholders, program leadership, and technical teams, ensuring cybersecurity requirements, contractual deliverables, schedules, and performance objectives are effectively managed. This role provides task direction, establishes priorities, monitors execution, identifies risks, and coordinates resolution of issues affecting mission objectives.

The Senior Cybersecurity Assurance Officer also assesses and mitigates information system security threats throughout the program lifecycle, validates security requirements, supports security architecture and engineering activities, and ensures compliance with applicable DoD, DISA, and federal cybersecurity policies and standards.

Must have at least an ACTIVE DoD SECRET clearance.

• Direct experience supporting DISA cybersecurity programs and managing DISA Task Orders.
• Experience coordinating multiple concurrent task orders or cybersecurity workstreams in a DoD environment.
• Active DoD Top Secret clearance
• Experience securing DoD cloud and containerized environments, including Azure or AWS Impact Level 5 or 6, Kubernetes, Linux, web applications, APIs, database services, inherited controls, shared-responsibility models, and cloud-specific authorization evidence.
• Experience supporting cybersecurity process improvements, security compliance initiatives, and risk management activities

• Must be authorized to work in the U.S.
• U.S. Citizenship is required.

• Must possess a minimum of a DoD Secret Clearance.

ERP is an Equal Opportunity Employer and does not discriminate against any employee or applicant for employment on the basis of race, color, sex, religion, national origin, veteran status, disability status, age, or any other characteristic protected by federal, state, or local law.

ERP International is committed to providing veteran employment opportunities to our service men and women.

• Ensure the NIST Risk Management Framework (RMF) is integrated throughout the information system development and operational lifecycle.
• Ensure cybersecurity requirements are appropriately identified, documented, and allocated within system designs and architectures.
• Lead and coordinate Assessment and Authorization (A&A) activities, including development and maintenance of authorization packages and supporting documentation.
• Develop, review, and maintain security authorization artifacts within the Enterprise Mission Assurance Support Service (eMASS).
• Review and update System Security Plans (SSPs), risk assessments, security control implementation statements, and supporting security documentation.
• Maintain working knowledge of DISA Security Technical Implementation Guides (STIGs) and their application to system security compliance.
• Review vulnerability and compliance assessment results, validate proposed mitigations, and coordinate remediation of identified security findings.
• Manage and monitor Plans of Action and Milestones (POA&Ms), including remediation schedules, risk documentation, and corrective actions.
• Support security requirements verification, compliance testing, and security control assessments.
• Support continuous monitoring activities to maintain compliance with applicable DoD and DISA cybersecurity requirements.
• Maintain and enforce applicable information security policies, standards, procedures, and guidelines.

• Lead and provide ownership over the planning, coordination, execution, and monitoring of assigned DISA Task Orders to ensure successful delivery of cybersecurity requirements and mission objectives.
• Assign, prioritize, and track technical activities across assigned cybersecurity personnel and supporting teams, ensuring accountability for task execution and deliverables.
• Serve as a primary operational point of contact for DTO execution, coordinating with DISA Government stakeholders, program management, and technical teams.
• Manage DTO schedules, milestones, dependencies, deliverables, and performance metrics to ensure work is completed within established timelines.
• Monitor task order progress, identify execution risks, and coordinate corrective actions to address schedule delays, resource constraints, and emerging requirements.
• Establish and maintain standardized DTO tracking, reporting, and documentation processes to improve execution visibility, accountability, and overall performance.

• Provide technical leadership and guidance to cybersecurity personnel supporting DISA programs and task orders.
• Coordinate with Information System Security Managers (ISSMs), system owners, engineers, developers, program managers, and Government stakeholders to address cybersecurity requirements and operational priorities.
• Mentor junior cybersecurity personnel and promote consistent implementation of security policies, procedures, and best practices.
• Identify opportunities to improve cybersecurity processes, documentation quality, task execution, and overall program efficiency.
• Communicate technical findings, cybersecurity risks, program impacts, and recommended corrective actions to technical and nontechnical stakeholders.
• Support management reviews, technical discussions, compliance assessments, and Government reporting requirements.

• Bachelor’s degree in Computer Science, Information Security, Information Technology or equivalent.
  • An equivalent combination of education, certifications, and relevant experience may be considered.

• Minimum eight (8) years of leading cybersecurity efforts, including as an ISSO or equivalent systems security experience, including knowledge of system functions, security policies, technical safeguards, and operational security measures.
• Must meet DoD 8570 IAT Level II certification requirements.
• Experience using eMASS, including completion of required eMASS training.
• Experience conducting vulnerability and risk assessments in support of system certification and accreditation.
• Experience developing and maintaining System Security Plans (SSPs), Risk Assessment Reports, Assessment and Authorization (A&A) packages, and System Requirements Traceability Matrices (SRTMs).
• Experience reviewing security documentation and evaluating security solutions for systems processing classified information.
• Demonstrated ability to manage multiple technical assignments, competing priorities, schedules, and deliverables.

• Strong understanding of the NIST Risk Management Framework (RMF), CNSSI 1253, and NIST SP 800-53 security controls.
• Working knowledge of NIST SP 800-37, 800-53, 800-53A, and 800-160 Volumes 1 and 2.
• Knowledge of DoD and DISA cybersecurity policies, security authorization requirements, and continuous monitoring processes.
• Experience implementing or evaluating DISA STIG requirements and analyzing vulnerability assessment findings.
• Experience managing POA&Ms, remediation milestones, and cybersecurity risk documentation.
• Ability to lead and coordinate technical task execution, establish priorities, track deliverables, and address performance challenges.
• Understanding of Government task order execution, contractual deliverables, reporting requirements, and stakeholder coordination.