- Develop and govern a compliance roadmap to maintain CMMC certification and mitigate risks across internal and external systems.
- Drive federal project initiatives and support systems and processes meeting DoD Impact Level 6 authorization requirements.
- Support FedRAMP Moderate authorization and reauthorization, including developing, reviewing, and maintaining system security documentation.
- Map and analyze security controls against FedRAMP Moderate/High baselines and NIST SP 800-53 controls.
- Assist with implementing and monitoring security controls for FedRAMP-authorized systems.
- Coordinate with engineering, operations, and DevSecOps to integrate security requirements into system design and operation.
- Maintain continuous monitoring documentation and support periodic assessments, penetration tests, and vulnerability scans.
- Coordinate with 3PAOs, government customers, and internal stakeholders on audits and assessments.
- Track POA&M items to closure and manage FedRAMP platform administration, training, and recurring authorization requirements.
- Provide compliance reporting, metrics, and risk analysis to management, and monitor changes to FedRAMP requirements and related guidance.
Risk Management