Facility Controls Cybersecurity Specialist (FRCS / RMF)

This position bridges facility control systems, operational technology (OT), and cybersecurity compliance. The specialist will support cybersecurity authorization and system lifecycle activities for facility-related control systems, including Building Automation Systems (BAS), monitoring systems, access control systems, fire alarm systems, elevator controls, and other facility systems and equipment.

The position works closely with cybersecurity personnel, facility stakeholders, system owners, contractors, controls integrators, and equipment vendors to support Risk Management Framework (RMF), Authority to Operate (ATO), Plans of Action and Milestones (POA&Ms), security documentation, technical configuration reviews, and system authorization and reauthorization activities.

• →Provide technical and cybersecurity support for Facility-Related Control Systems (FRCS), Operational Technology (OT), and associated systems supporting existing facilities and facility projects.
• →Support systems including Building Automation Systems (BAS), monitoring systems, access control systems, fire alarm systems, elevator controls, and other facility-related controls and equipment.
• →Assist Information System Security personnel with maintaining the confidentiality, integrity, and availability of assigned facility information systems.
• →Support the securing, managing, reviewing, and auditing of technical system settings necessary to maintain applicable cybersecurity and system authorization requirements.
• →Develop, maintain, and track POA&Ms associated with cybersecurity deficiencies, system authorization, and lifecycle activities.
• →Support RMF authorization and reauthorization activities when security-impacting system changes occur.
• →Support the development, maintenance, and submission of new and existing RMF authorization packages.
• →Coordinate with system owners, facility personnel, contractors, controls integrators, equipment manufacturers, and vendors to collect, review, validate, and submit required technical and cybersecurity information.
• →Support cybersecurity requirements associated with modifications, upgrades, replacements, and new projects involving facility control systems.
• →Maintain accurate system lifecycle, configuration, authorization, audit, and supporting technical documentation.
• →Participate in meetings and conduct required site visits.
• →Prepare detailed weekly status reports covering ongoing facility control systems and cybersecurity activities.