Cybersecurity & Information Assurance Specialist — Federal Health IT
Job Details
- Experience
- At least 5 years of professional cybersecurity or information assurance experience supporting Department of Defense (DoD) environments.
Requirements
- Have at least 5 years of professional cybersecurity or information assurance experience supporting DoD environments.
- Meet applicable DoD 8140 cybersecurity workforce qualification requirements, including IAM Level II.
- Hold an approved qualification such as ISC2 CGRC (formerly CAP), CompTIA SecurityX (formerly CASP+), or an approved equivalent meeting DoD 8140 requirements.
- Have professional experience with STIGs, ACAS, and eMASS.
- Understand DoD cybersecurity policies, information assurance requirements, and security compliance practices.
- Have experience maintaining security documentation, workforce qualification records, access reviews, and assessment evidence.
- Be able to coordinate account management and access reviews while maintaining security controls and documentation.
- Be familiar with security incident reporting procedures and coordination with authorized response teams.
- Maintain accurate, audit-ready records and manage multiple responsibilities independently in a remote working environment.
- Preferred: CISSP certification, experience supporting DHA RMF packages, familiarity with CMMC Level 2, or experience supporting federal healthcare IT systems.
Responsibilities
- Maintain DoD cybersecurity workforce qualification records and monitor certification expiration dates.
- Conduct periodic access reviews for designated systems, applications, and tools.
- Coordinate user account and credential lifecycle activities with security stakeholders.
- Maintain information assurance documentation and security control records with accurate, audit-ready evidence.
- Collect, organize, and maintain STIG and ACAS evidence.
- Contribute to eMASS records and prepare documentation for customer security assessments.
- Support security compliance activities and alignment with applicable DoD cybersecurity requirements.
- Report security incidents through established procedures and coordinate with authorized incident response teams.
- Guide field engineering and operational teams on security readiness and compliance obligations.
- Identify documentation gaps and support security reviews, compliance monitoring, and assessment preparation.