Logo
Bravura Inc.

Risk Management Framework Lead

Bravura Inc., Frankfort, Kentucky, United States,


Role : Risk Management Framework Lead

Location : Fort Knox, KY

Education/Certifications : MA/MS; IAT Level II; Computing Environment Certification

Years of Experience : 10+

Clearance

Level & Investigation : Secret

Job

Description :

Qualifications:

Serves as RMF Lead. Must have experience in RMF concepts and understanding of each process phase.

Must have experience working with the Army's RMF management package Enterprise Mission Assurance Support Service (eMASS) in addition to: experience managing system vulnerabilities and associated Risk Management Documents (Plans of Actions and Milestones (POA&Ms), Risk Acceptance Documents, and Waivers).

Requires understanding DISA System Technical Implementation Guide (STIGs) and will provide guidance to technical Subject Matter Experts (SMEs) based on those STIGS.

Must have knowledge and understanding of a wide variety of IT system infrastructure and application development methodologies.

Uses current information security technology disciplines and practices to ensure confidentiality, integrity, and availability of information assets IAW established standards and procedures.

Develops and maintains knowledgebase on changing regulatory, threat, and technology landscapes to continually develop or maintain security policies and standards, and ensure compliance throughout organization.

Specific Responsibilities

:

Supports operations under the Cybersecurity standards defined in all required regulations and directives.

Provides real-time compliance, continuous monitoring IAW NETCOM’s sampling requirements, routine assessments and heightened scrutiny of the cybersecurity posture and associated risks for all Customer systems, including but not limited to over 200 different system types.

Delivers required reports listing compliant and non-compliant findings, vulnerabilities, Control Correlation Identifier (CCI), Security Technical Implementation Guides (STIGs), and Security Requirements Guides (SRGs) for each system assessed.

#J-18808-Ljbffr