Information Assurance Analyst, SME (Team Lead) P57

## Description

FEDITC, LLC is a fast-growing business supporting DoD and other intelligence agencies worldwide. FEDITC develops mission critical national security systems throughout the world directly supporting the Warfighter, DoD Leadership, & the country. We are proud & honored to provide these services.

**Overview of position:**

FEDITC seeks an **Information Assurance (IA) Team Lead** to work in **Indianapolis, IN area** to direct cybersecurity compliance and RMF accreditation operations for the DFAS Common Computing Environment (CCE). This position provides subject matter expertise in Assessment & Authorization (A&A), FISMA compliance, and audit support ensuring the CCE maintains continuous Authority to Operate (ATO).

**An active Top Secret/SCI security clearance and a United States Citizenship is required to be considered for this position.**

**On-site presence required at designated location**

**Responsibilities**

• Lead and supervise Information Assurance staff delivering RMF compliance and accreditation support for the DFAS CCE
• Direct Assessment & Authorization (A&A) activities under DoD Risk Management Framework (RMF) using eMASS
• Manage FISMA compliance including annual control testing, documentation, and reporting
• Oversee preparation and maintenance of all RMF artifacts including Security Plans, Control Validations, POA&Ms, and Acceptance of Risk documentation
• Coordinate support for FISCAM audits, DFAS internal audits, and SSAE attestations
• Ensure ATO/ATC packages remain current and compliant for all CCE mission systems (cloud and on-premises)
• Direct continuous monitoring activities including vulnerability scan review, patch management compliance, and IAVA tracking
• Lead POA&M management, root cause analysis, and remediation coordination
• Coordinate with DFAS CIO validator and ISSM on all RMF actions and compliance requirements
• Develop and maintain IA documentation including policies, procedures, and audit evidence
• Ensure 100% RMF certification maintenance and 95%+ FISCAM control pass rates

## Qualifications
**Required Experience/Skills:**

• Minimum 10 years of information assurance experience in DoD or Federal environments with increasing responsibility
• Expert knowledge of DoD RMF (DoDI 8510.01), NIST SP 800-37, and NIST SP 800-53 security controls
• Demonstrated experience managing A&A packages in eMASS
• Experience supporting FISMA compliance programs and federal cybersecurity audits (FISCAM, SSAE)
• Strong knowledge of continuous monitoring, vulnerability management, and POA&M processes
• Experience with security control assessments and validation methodologies
• Understanding of DoD IT security policies, DISA STIGs, and compliance frameworks
• Experience coordinating with Authorizing Officials, ISSMs, and security validators
• Proven ability to lead compliance teams and manage multiple concurrent authorization packages
• Ability to support COOP exercises and emergency operations

**Preferred Qualifications:**

• CAP, CASP+, or equivalent RMF certification
• Experience with FISCAM audit support and IT general controls testing
• Xacta, Archer, or similar GRC platform experience
• Experience with classified system (JWICS) accreditation
• DFAS or DoD financial system RMF/IA experience
• Experience achieving two-year or extended ATO packages

**Education:**

• BA/BS Degree

**Certifications:**

• 722 ISSM Advanced certifications (CISSP, CISM, or equivalent)
• Computing Environment (CE) certification required for privileged access roles
• Must obtain and maintain all mandatory DoD 8140 certifications

**Clearance:**

• **Active Top Secret/ SCI clearance is required.**
• **Must be a United States Citizen and pass a background check.**
• Maintain applicable security clearance(s) at the level required by the client and/or applicable certification(s) as requested by FEDITC and/or required by FEDITC’S Client(s)/Customer(s)/Prime contractor(s).

*FEDITC, LLC. is committed to fostering an inclusive workplace and provides equal employment opportunities (EEO) to all employees and applicants for employment. We do not employ AI tools in our decision-making processes. Regardless of race, color, religion, sex (including pregnancy), sexual orientation, gender identity or expression, national origin, age, disability, genetic information, marital status, amnesty, or status as a covered veteran, FEDITC, LLC. ensures that all employment decisions are made in accordance with applicable federal, state, and local laws. Our commitment to non-discrimination in employment extends to every location in which our company operates.*