Ôasys - Huntsville, AL
posted 3 months ago
OASYS, INC., a leading-edge government contractor, is seeking applicants for the position of RMF Cyber Analyst / Information System Security Manager (ISSM) to support our Army customer in Huntsville, AL. The ISSM will play a critical role in reviewing RMF Assessment and Authorization documentation, standard operating procedures, policies, and security instructions for both networked and stand-alone computer systems, which include both traditional IT and Operational Technology (OT) systems. This position requires oversight and guidance for multiple systems, ensuring compliance with established security protocols and standards. The ISSM will be responsible for documenting security findings, incident response activities, and compliance efforts. This includes developing artifacts for upload to the Enterprise Mission Assurance Support Service (EMASS) in accordance with Army/AMC standards and regulatory requirements. The candidate must possess a foundational understanding of Operational Technology and be able to articulate the Purdue Model and its implementation. Responsibilities also include completing inventories of OT systems in accordance with EXORD 141-18 and AMC directives, participating in security assessments of IT/OT systems, identifying vulnerabilities, and recommending mitigation strategies. In addition, the ISSM will conduct audits to ensure that IT/OT systems security policies and procedures are implemented as defined in security plans and best practices. The role involves performing detailed analyses to validate established IT/OT security requirements and recommending additional security requirements and safeguards. The ISSM will establish strict program control processes and policies to mitigate risks and support the certification and accreditation of systems using AMC RMF processes. The position also requires assisting in developing security documentation for upload to EMASS, ensuring accuracy, completeness, and compliance with AMC RMF requirements. The ISSM will provide leadership and threat mitigation training techniques to stakeholders and administer FRCS/BCS systems in accordance with DoD/Army guidelines. Participation in Operational Planning Teams (OPT) and Working Groups with DoD/Army/AMC stakeholders, program managers, and security teams is also expected, documenting security requirements, concerns, and resolutions to support the successful delivery of IT/OT solutions.