Information Assurance Specialist

TACG is seeking an Information Assurance Specialist to support Information System Security Officer activities. In this role, you will assist in the analysis, identification, and documentation of security requirements for both legacy and emerging system capabilities. You will support the application of cybersecurity policies and procedures, ensure compliance with Information Assurance mandates, and help implement and maintain technical and administrative security controls across both classified and unclassified systems.

Work Schedule & Location:

• Must be able to work Monday through Friday, on-site in Kettering, OH, until further notice.
• Must be willing to travel on-site to the Pentagon or Fairfax, VA, as needed.

Key Responsibilities (including but not limited to):

• Assessment & Authorization (A&A): Assist in the development, maintenance, and monitoring of Risk Management Framework (RMF) and Authorization to Operate (ATO) packages (including Plan of Action and Milestones [POA&Ms], Cybersecurity Strategies, and test results) using DoD systems like eMASS and ITIPS.
• Vulnerability & Compliance Monitoring: Execute routine continuous monitoring tasks. This includes running Nessus scans, reviewing DISA STIGs, tracking IAVAs, and evaluating source code scans and compliance checklists to verify system hardening.
• Policy Adherence: Apply and support the implementation of enterprise IA policies and security architectures to maintain compliance with NIST, FISMA, and DoD directives (e.g., DoDI 8500.01).
• Coordination Support: Assist in gathering security compliance artifacts from platform developers, system owners, and program teams, and help organize deliverables for the government ISSM.
• Security Control Verification: Assist in reviewing technical controls, verifying mitigation steps, gathering vendor artifacts, and documenting compliance metrics for review by senior team members.

Requirements:

• Clearance:
• Secret

• Education & Certification:
• Bachelor’s degree preferred.
• CompTIA Security+ CE certification or higher.

• Experience:
• Hands-on experience with DoD Information Systems and security processes. 
• Supporting ATO packages.
• Familiarity with RMF controls, NIST SP 800-53 Rev 5 preferred.
• Supporting role in gathering and organizing artifacts for a SIPR-related information system ATO package, including test results.
• Hands-on experience using eMASS.
• Skills:
• Strong command of the English language, with the ability to clearly document technical findings and communicate compliance statuses.
• Strong Microsoft Office skills, including data organization in Excel (vlookups, formulas), formatting documentation in Word, and preparing presentation slides in PowerPoint.