Senior Cybersecurity Internal Controls Administrator

Empower AI is AI for government. Empower AI gives federal agency leaders the tools to elevate the potential of their workforce with a direct path for meaningful transformation. Headquartered in Reston, Va., Empower AI leverages three decades of experience solving complex challenges in Health, Defense, and Civilian missions. Our proven Empower AI Platform® provides a practical, sustainable path for clients to achieve transformation that is true to who they are, what they do, how they work, with the resources they have.

The result is a government workforce that is exponentially more creative and productive. For more information, visit www.

Empower.ai.

Empower AI is proud to be recognized as a 2024 Military Friendly Employer by Viqtory, the publisher of G.I. Jobs. This designation reflects the company’s commitment to hiring and supporting active-duty and veteran employees.

The Senior Cybersecurity Internal Controls Administrator provides comprehensive support in accordance with DoDI 8500.01, DoDI 8510.01, and AR 25-2, delivering Enterprise eMASS and Risk Management Framework (RMF) services, including developing RMF packages, maintaining asset lists and categorizations, and scheduling and coordinating system validation reviews.

This is a remote-eligible position. Local candidates in the Roanoke and Radford, Virginia area are encouraged to apply, and work may be performed locally for those who prefer an on-site or hybrid arrangement. The ideal candidate will bring deep RMF and eMASS compliance expertise, strong DoD cybersecurity compliance knowledge, and the ability to support mission-critical Army IT services across enterprise data centers and cloud-hosted environments.

• Provide Enterprise eMASS and RMF services, including developing RMF packages and maintaining asset lists and categorizations.
• Schedule and coordinate system validation reviews.
• Generate artifacts to support control compliance; review ACAS and STIG reports and coordinate remediation efforts.
• Create, track, and maintain Plan of Action and Milestones (POA&M) documentation.
• Perform annual security reviews and participate in Continuity of Operations (COOP) and Incident Response testing.
• Maintain Army PPSM and Circuit Registry records.
• Participate in Software Assurance reviews to ensure ongoing items are appropriately documented via eMASS POA&M.

• Cybersecurity Certification (such as CISSP or equivalent).
• Bachelor's degree in Computer Science is preferred; equivalent years of cybersecurity and RMF experience will be considered in lieu of a degree.
• Active DoD Secret Security Clearance.
• 10 or more years' experience with Cybersecurity and RMF-related areas.
• Extensive experience with Enterprise eMASS and RMF services.
• Proficiency in developing RMF packages and maintaining asset lists and categorizations.
• Ability to schedule and coordinate system validation reviews.
• Experience generating artifacts to support control compliance.
• Knowledge of ACAS and STIG reports and coordinating remediation efforts.
• Experience creating, tracking, and maintaining Plan of Action and Milestones (POA&M).
• Ability to perform annual security reviews.
• Participation in Continuity of Operations (COOP) and Incident Response testing.
• Ability to maintain Army PPSM and Circuit Registry records.
• Participation in Software Assurance reviews and documenting items via eMASS POA&M.
• Experience with security compliance and control documentation.

• Bachelor's degree in Computer Science or equivalent years of experience.
• Familiarity with DoDI 8500.01, DoDI 8510.01, and AR 25-2.
• Strong analytical and problem-solving skills.
• Excellent communication and coordination skills.
• Experience with Army enterprise monitoring tools and…