Senior Cybersecurity Assurance Officer

Overview

ERP International, LLC (www.erpinternational.com) is currently seeking a Senior Cybersecurity Assurance Officer supporting our DISA customer onsite at Fort Meade, MD. The Senior Cybersecurity Assurance Officer provides cybersecurity leadership, technical oversight, and DISA Task Order (DTO) management in support of mission-critical information systems and programs. The position is responsible for supporting the Risk Management Framework (RMF), Assessment and Authorization (A&A), continuous monitoring, security engineering, vulnerability management, and execution of assigned DISA Task Orders.

The Senior Cybersecurity Assurance Officer serves as a key interface between Government stakeholders, program leadership, and technical teams, ensuring cybersecurity requirements, contractual deliverables, schedules, and performance objectives are effectively managed. This role provides task direction, establishes priorities, monitors execution, identifies risks, and coordinates resolution of issues affecting mission objectives.

The Senior Cybersecurity Assurance Officer also assesses and mitigates information system security threats throughout the program lifecycle, validates security requirements, supports security architecture and engineering activities, and ensures compliance with applicable DoD, DISA, and federal cybersecurity policies and standards.

Must have at least an ACTIVE DoD SECRET clearance.

Culture of ERP:  Fast-paced, fun, collaborative, energetic, and positive.

Location: Expectation is to be fully on-site at Fort Meade, MD based on customer requirements. Potential for some remote work options based on business needs and/or requirements. 

Be the Best!  Join our exceptional team in a dynamic work environment only to discover the immense job satisfaction and pride of being an ERP Employee! ERP International is honored to be named a 2026 Top Workplace by WTOP News! 7 Years Running.

Connect With Us! Apply online today and discover more about this exceptional employment opportunity.  www.erpinternational.com

ERP Offers Employees:

* Competitive Salaries & Benefits to include Health, Dental, Vision and Retirement!* Health Advocate & Concierge Services!* Unlimited Job- Related Training & Development!

* Employee Recognition & Incentive Programs!

* Employee Appreciation & Company Sponsored Events!* Opportunity to work with leading edge technology!

* Community Outreach & Charity Work!

ERP is an Equal Opportunity Employer and does not discriminate against any employee or applicant for employment on the basis of race, color, sex, religion, national origin, veteran status, disability status, age, or any other characteristic protected by federal, state, or local law.

ERP International is committed to providing veteran employment opportunities to our service men and women.

Pay Range: $160,000-190,000.

The salary range for this position is determined based on a variety of factors, including but not limited to, experience, qualifications, skill level, and location. The final salary offer will fall within this range and will be commensurate with the candidate’s background and the specific demands of the role.

About ERP International, LLC: ERP is a nationally respected provider of health, science, and technology solutions supporting clients in the government and commercial sectors. We provide comprehensive enterprise information technology, strategic sourcing, and management solutions to DoD and federal civilian agencies in 40 states. Founded in 2006, ERP is headquartered in Laurel, MD and maintains satellite offices in Montgomery, AL and San Antonio, TX - plus project locations nationwide. ERP is an Equal Opportunity Employer - Disability and Veteran.

Responsibilities

Duties and Responsibilities include the following:

Information System Security and RMF Management

• Ensure the NIST Risk Management Framework (RMF) is integrated throughout the information system development and operational lifecycle.
• Ensure cybersecurity requirements are appropriately identified, documented, and allocated within system designs and architectures.
• Lead and coordinate Assessment and Authorization (A&A) activities, including development and maintenance of authorization packages and supporting documentation.
• Develop, review, and maintain security authorization artifacts within the Enterprise Mission Assurance Support Service (eMASS).
• Review and update System Security Plans (SSPs), risk assessments, security control implementation statements, and supporting security documentation.
• Maintain working knowledge of DISA Security Technical Implementation Guides (STIGs) and their application to system security compliance.
• Review vulnerability and compliance assessment results, validate proposed mitigations, and coordinate remediation of identified security findings.
• Manage and monitor Plans of Action and Milestones (POA&Ms), including remediation schedules, risk documentation, and corrective actions.
• Support security requirements verification, compliance testing, and security control assessments.
• Support continuous monitoring activities to maintain compliance with applicable DoD and DISA cybersecurity requirements.
• Maintain and enforce applicable information security policies, standards, procedures, and guidelines.

DISA Task Order (DTO) Management and Oversight

• Lead and provide ownership over the planning, coordination, execution, and monitoring of assigned DISA Task Orders to ensure successful delivery of cybersecurity requirements and mission objectives.
• Assign, prioritize, and track technical activities across assigned cybersecurity personnel and supporting teams, ensuring accountability for task execution and deliverables.
• Serve as a primary operational point of contact for DTO execution, coordinating with DISA Government stakeholders, program management, and technical teams.
• Manage DTO schedules, milestones, dependencies, deliverables, and performance metrics to ensure work is completed within established timelines.
• Monitor task order progress, identify execution risks, and coordinate corrective actions to address schedule delays, resource constraints, and emerging requirements.
• Establish and maintain standardized DTO tracking, reporting, and documentation processes to improve execution visibility, accountability, and overall performance.

Cybersecurity Leadership and Stakeholder Coordination

• Provide technical leadership and guidance to cybersecurity personnel supporting DISA programs and task orders.
• Coordinate with Information System Security Managers (ISSMs), system owners, engineers, developers, program managers, and Government stakeholders to address cybersecurity requirements and operational priorities.
• Mentor junior cybersecurity personnel and promote consistent implementation of security policies, procedures, and best practices.
• Identify opportunities to improve cybersecurity processes, documentation quality, task execution, and overall program efficiency.
• Communicate technical findings, cybersecurity risks, program impacts, and recommended corrective actions to technical and nontechnical stakeholders.
• Support management reviews, technical discussions, compliance assessments, and Government reporting requirements.

Qualifications

Required Education:

• Bachelor’s degree in Computer Science, Information Security, Information Technology or equivalent.
  • An equivalent combination of education, certifications, and relevant experience may be considered.

Required Experience:

• Minimum eight (8) years of leading cybersecurity efforts, including as an ISSO or equivalent systems security experience, including knowledge of system functions, security policies, technical safeguards, and operational security measures.
• Must meet DoD 8570 IAT Level II certification requirements.
• Experience using eMASS, including completion of required eMASS training.
• Experience conducting vulnerability and risk assessments in support of system certification and accreditation.
• Experience developing and maintaining System Security Plans (SSPs), Risk Assessment Reports, Assessment and Authorization (A&A) packages, and System Requirements Traceability Matrices (SRTMs).
• Experience reviewing security documentation and evaluating security solutions for systems processing classified information.
• Demonstrated ability to manage multiple technical assignments, competing priorities, schedules, and deliverables.

Required Skills:

• Strong understanding of the NIST Risk Management Framework (RMF), CNSSI 1253, and NIST SP 800-53 security controls.
• Working knowledge of NIST SP 800-37, 800-53, 800-53A, and 800-160 Volumes 1 and 2.
• Knowledge of DoD and DISA cybersecurity policies, security authorization requirements, and continuous monitoring processes.
• Experience implementing or evaluating DISA STIG requirements and analyzing vulnerability assessment findings.
• Experience managing POA&Ms, remediation milestones, and cybersecurity risk documentation.
• Ability to lead and coordinate technical task execution, establish priorities, track deliverables, and address performance challenges.
• Understanding of Government task order execution, contractual deliverables, reporting requirements, and stakeholder coordination.

Preferred Qualifications:

• Direct experience supporting DISA cybersecurity programs and managing DISA Task Orders.
• Experience coordinating multiple concurrent task orders or cybersecurity workstreams in a DoD environment.
• Active DoD Top Secret clearance
• Experience securing DoD cloud and containerized environments, including Azure or AWS Impact Level 5 or 6, Kubernetes, Linux, web applications, APIs, database services, inherited controls, shared-responsibility models, and cloud-specific authorization evidence.
• Experience supporting cybersecurity process improvements, security compliance initiatives, and risk management activities

Work Authorization Requirements:

• Must be authorized to work in the U.S.
• U.S. Citizenship is required.

Security Requirements:

• Must possess a minimum of a DoD Secret Clearance.