Cybersecurity Specialist

Implement and manage risk management processes using RMF, NIST 800-series, FIPS, and FISMA frameworks to support Authorization to Operate (ATO) for information systems. Serve as the focal point for enterprise System Security Plans (SSPs), privacy analyses, system categorizations, and assessment packages. Develop and maintain Plans of Action and Milestones (POA&M) and coordinate continuous monitoring for cybersecurity improvements. Collaborate with Information System Owners, ISSOs, ISAs, and engineering teams to embed security controls in new and existing systems and applications. Perform risk analyses, conduct control assessments, and provide guidance to IT teams to ensure compliance with federal standards and regulations. Stay current on threats and security technologies to continuously improve the security posture and support RMF readiness.