Sr Cybersecurity Compliance Specialist

Bering-Alaka'ina Holdings, LLC is looking for a Sr Cybersecurity Compliance Specialist to support our government customer located in Arlington, Virginia.

This position is 100% on-site.

Core responsibilities involve executing continuous system auditing within eMASS, distributing compliance tasks among stakeholders, and aggressively supporting ATO sustainment efforts. Key duties include enforcing and validating regulatory compliance for FISMA, DoDI 8510.01 (RMF), PPSM, and the DoD Cyber Scorecard. Furthermore, the Senior Specialist shall conduct advanced vulnerability scanning analysis, perform IT personnel security audits, provide technical support for incident response (including classified spillage containment), and deliver localized cybersecurity awareness training.

• Bachelor of Science in Computer Science or related field or 4-7 years of experience in the cybersecurity field.
• Required to be certified IAM Level II, IAW AR 25-2 and DA Pam 25-2-6 at time of onboarding.
• Satisfy all mandatory DoD 8140.03 / DCWF certification requirements.

• Key duties include enforcing and validating regulatory compliance for FISMA, DoDI 8510.01 (RMF), PPSM, and the DoD Cyber Scorecard.
• Shall conduct advanced vulnerability scanning analysis, perform IT personnel security audits, provide technical support for incident response (including classified spillage containment), and deliver localized cybersecurity awareness training.
• Routinely serves on the Compliance Team as the Organizational Information System Security Manager (O-ISSM) and must be familiar with typical ISSM/ISSO tasks such as System Security Plans (SSPs), Plans of Actions & Milestones (POA&Ms), Authority to Operate (ATO) packages for government approval, etc.
• Shall review system security packages for completeness and author required ATO package documents, including the SSP, Risk Assessment Report (RAR), and PO&AMs as needed.
• Shall continually scan the system for security gaps and provide reports to the Cybersecurity Compliance Lead.
• Shall identify and clearly communicate, in verbal and written form, the status, strengths, vulnerabilities, and risks of all systems and applications within the area of responsibility to the Cybersecurity Compliance Lead and Program Manager as needed.
• Shall run Security Technical Implementation Guides (STIGs) scans and report any findings to the Cybersecurity Compliance Lead.
  • Produce a comprehensive POAM for any system incompatible rules due to the interruption of system functions or application features.
  • Maintain POAMs and ensure they are updated at all times.
• Shall have senior level working experience using eMASS as the repository and workflow for ATO security packages.
  • Must evaluate and/or author SSPs, POA&Ms, and RARs for accuracy, compliance with security policies, completeness, and timeliness.
  • Shall review eMASS records and make recommendations regarding security and compliance gaps.
• At the direction of the Cybersecurity Compliance Lead and Program Manager, contribute to the timely and accurate production and submission of required deliverables.
• Participate in COOP / Alternative site faculties activities as needed

• Advanced, specialized knowledge of the DoD RMF, NIST directives, and Army security regulations.
• Ability to independently develop complex technical cybersecurity documentation, risk assessments, and executive-level presentations.
• Must have attained high-level eMASS experience within the last 2-3 years.

• U. S. Citizenship required.
• Must have and maintain an active Top Secret clearance.

• $117,835 - $133,205
• The compensation range or hourly rate provided is a…