Inactive

Tria Federal

End-to-end digital transformation for federal agencies

Power BI Mid-Level Subject Matter Expert

Security Governance, Risk & CompliancePosted on Aug 19

Full-timeWashington, DC, USANo salary listed

About the Job

Requirements

Very familiar with the Department of Homeland Security.
Have 3–5 years of cybersecurity experience, especially conducting Department of Homeland Security Security Assessment and Authorization assessments.
Have a Department of Homeland Security Public Trust clearance.
Have working knowledge and experience with the Cyber Security Assessment and Management system and the National Institute of Standards and Technology Risk Management Framework.
Have working knowledge and experience with the Department of Homeland Security Security Authorization Process.
Have experience working with system stakeholders to assess and manage system cybersecurity risk.
Know the process for obtaining a system Authority to Operate and the requirements for maintaining it.
Be able to synthesize complex information about information technology systems and communicate system status and requirements in written products and verbal presentations.
Be able to assess and identify clear, concise, and effective security control implementation statements.
Be able to work independently and within given timelines.
Be able to report onsite at the customer headquarters as required.
Have Certified Information Systems Security Professional or Certified Information Security Manager credentials.
Have 3–5 years of information technology security control assessment experience.
Have Department of Homeland Security Security Assessment and Authorization experience.
Have a bachelor's degree.
Have Security+ certification.

Responsibilities

Conduct independent tests and evaluations of technical, operational, and management security controls.
Review system documentation, including security plans, configuration management plans, contingency plans, and account management plans.
Analyze and interpret vulnerability and compliance scans.
Identify security weaknesses, design gaps, and compliance deviations.
Author comprehensive Security Assessment Reports with clear risk findings and Authority to Operate deliverables.
Perform Plan of Action and Milestones management activities, including creating, managing, and closing items.
Coordinate with system owners, engineers, and risk officers during authorization processes.

Who we are:

Tria Federal delivers digital services and technology solutions that support the health and safety of veterans, service members and civilians. For two decades, federal agencies have relied on Tria companies to advance their critical missions and modernize their systems, so that they can uphold their commitment to the American people. Today, we are pushing the boundaries of possibility through partnerships and investments in artificial intelligence and emerging technologies, developing solutions for the biggest challenges that government will face tomorrow.

We are proud to employ and support military veterans who bring mission-first mindset, technical expertise, and leadership qualities that strengthen our work. Veterans, transitioning service members, and military spouses are strongly encouraged to apply.

Job Description:

The Information Systems Compliance Specialist will conduct Security Assessment and Authorization (A&A) support for USSS IT systems. This candidate must have the ability to work onsite at customer HQ 1-2 times per week in Washington, DC.

Requirements:

Very familiar with DHS.
3-5 years Cybersecurity experience, especially conducting DHS A&A Assessments.
DHS Public Trust clearance.
Working knowledge and experience with CSAM and the NIST RMF.
Working knowledge and experience with the DHS Security Authorization Process.
Experience working with system stakeholders to assess and manage system cybersecurity risk.
Knowledge of the process to obtain a system ATO and requirements to maintain the ATO.
Ability to synthesize complex IT system information and communicate system status and requirements in written products and verbal presentations.
Ability to assess and identify clear, concise, and effective security control implementation statements.
Ability to work independently and within given timelines.
Ability to report onsite at customer HQ as required.

Qualifications:

CISSP, CISM
3-5 Years of IT Security Control Assessment experience
DHS A&A Experience
Bachelor's degree
Security+ Certification

Responsibilities:

Conduct independent tests and evaluations of technical, operational, and management security controls.
Review system documentation to include security plans, Configuration Management Plans, Contingency Plans, Account Management Plans, etc.
Ability to analyze and interpret vulnerability and compliance scans.
Identify security weaknesses, design gaps, and compliance deviations.
Author comprehensive Security Assessment Reports (SARs) with clear risk findings and ATO deliverables.
Perform Plan of Action and Milestones (POA&Ms) management activities including creation, management and closures
Coordinate with system owners, engineers, and risk officers during authorization processes

Why Tria?
What defines the Tria brand is more than just our dedication to excellence in our craft; it’s our incredible team of dedicated, talented, and passionate people that make Tria so exceptional. As people powering possible, we are all partners in our team’s shared success.

As a company that cares about people, we seek to cultivate a culture in which all can thrive personally and professionally. We offer a top-tier benefits package to invest in your physical, mental, and financial health and wellness so that you can be your best self - at work and in life. At Tria, we are growth-minded, entrepreneurial in spirit, and committed to fostering a culture of inclusion and opportunity for all. Whatever your background, your role, your department, or stage in your professional journey, here you will have opportunities to learn new skills, seize new challenges, and advance your career as we grow.

California Consumer Privacy Act (CCPA)

We are committed to protecting your privacy. As part of our compliance with the California Consumer Privacy Act (CCPA), we want to inform you about how we collect, use, and protect your personal information during the job application process. For more details, please review https://www.oag.ca.gov/privacy/ccpa.

About the Company

Tria Federal

End-to-end digital transformation for federal agencies

Tria Federal provides end-to-end digital transformation services for federal health and public-safety agencies by combining advisory support with hands-on technical execution. Its five service lines—results management, integrated health optimization, next-generation analytics, financial transformation, and digital modernization—use AI, cloud engineering, agile development, and data analytics, with Tria Labs for rapid prototyping and Softrams-enhanced health-system modernization. It differentiates itself through an integrated strategy-and-execution model and by consolidating several specialist government contractors under one umbrella, backed by Sagewind Capital. Its goal is to help government clients improve efficiency, transparency, and outcomes by delivering practical, scalable technology and process changes.

Company size: 1,001-5,000
Company stage: Not listed
Total funding: Not listed
Headquarters: Arlington County, VA
Founded: 2021

Recently Posted Jobs

Explore more opportunities at Tria Federal

See more jobs