Assessment and Authorization Team Lead; Remote

The Office of the Chief Information Officer (OCIO) advances the Department of Energy’s (DOE) mission by establishing enterprise-wide policy, standards, and services that ensure secure, reliable, and innovative information technology (IT) delivery across the Department. The OCIO is committed to strengthening DOE’s cybersecurity posture, improving IT service performance, and ensuring the protection of the Department’s systems, networks, and data while maintaining responsible stewardship of taxpayer resources.

The Assessment and Authorization Team Lead is a subject matter expert who supports this mission by leading cybersecurity measures, assessing security controls, evaluating system risks, and leading efforts to respond to cybersecurity data calls, research, and analysis. This role combines deep experience and understanding of cybersecurity functions, Assessment & Authorization (A&A), and oversight and compliance responsibilities, ensuring DOE systems remain compliant, secure, and resilient.

• Provide technical knowledge and analysis of all areas related to A&A and lead all phases of the Risk Management Framework with emphasis on the planning, analysis, testing, integration, documentation, and presentation phases.

• Analyzes, resolves, and reports on all issues to ensure that projects remain on schedule and within budget. Prepares and delivers presentations and briefings as required during A&A, risk analysis, and vulnerability review efforts.

• Serve as the subject matter expert, possessing in-depth knowledge of all aspects of A&A and risk management such as security and privacy controls, implementation of new and emerging trends in the industry, and process improvement initiatives (i.e., Cloud security, Ongoing Authorization, NIST SP 800-53 Rev. 5, Rapid ATO, etc.).

• Provides technical knowledge, analysis, direction, and guidance of all difficult or unusual problems as related to A&A.

• As a lead subject matter expert, applies principles, methods, and knowledge of A&A to specific task order requirements, advanced mathematical principles, and methods to exceptionally difficult and narrowly defined technical problems in engineering and other scientific applications to arrive at automated solutions.

• Conducts briefings to Federal Leadership and possesses and applies subject matter expertise across key tasks and high-impact assignments.

• Serves as a technical expert across multiple project assignments.

• Perform assessments of existing and new NIST and FISMA systems, including subsystems within respective system boundaries, communicate results, articulate potential implications of identified control weaknesses, and work to document through artifacts and documentation.

• Lead, mentor, and guide a team of cybersecurity professionals, including Assessors, Security Assessment Team (SAT), Continuous Monitoring Team (Con Mon), and DOR FedRAMP Team.

• Lead reviews and analysis of findings packages outlining identified findings, weaknesses, remediation, and provide guidance during meeting reviews.

• Lead reviews and analysis of significant system change requests, deviation requests, and provide guidance and oversight of potential system security impacts.

• Conduct final quality assurance reviews of security packages, including System Security Plans and Risk Assessments, before submission to the Authorizing Official.

• Establish schedules, manage milestones, and coordinate remediation activities, including Plans of Action and Milestones (POA&Ms).

• Establish and maintain strong relationships with a team of cybersecurity professionals, including Information System Security Officers (ISSOs), System Owners (SOs), Technical Points of Contact (TPOCs), and Security Control…