Cybersecurity Specialist

Responsible for implementing and executing risk management using NIST 800-series, FIPS, and FISMA to maintain Authority to Operate (ATO) for information systems. Collaborates with IT and engineering teams to identify vulnerabilities, perform security control assessments, and develop risk mitigation strategies. Manages Authorization Packages (AP) including Privacy Analysis, System Categorization, Risk Assessment Reports (RAR), and System Security Plans (SSP). Serves as the focal point for enterprise SSPs, supporting Information System Owners (ISO) and Information System Security Officials (ISSO) with RMF duties. Develops and maintains Plans of Action & Milestones (POA&Ms) as part of continuous monitoring and cybersecurity improvements. Stays current on emerging threats and technologies to enhance security posture and ensure compliance with federal standards.