Job Description

Key Responsibilities:

• Lead, manage, and perform validation of Navy information systems in accordance with DoD and DON RMF guidance, including NIST SP 800-53 security controls.
• Review and validate Security Authorization Packages in eMASS, including System Security Plans (SSPs), Security Assessment Reports (SARs), and Plan of Action and Milestones (POA&Ms).
• Conduct independent assessments of Navy system security controls, providing expert findings, recommendations, and risk mitigations.
• Support Authorization to Operate (ATO) and Interim ATO (IATO) packages by validating implementation evidence and verifying compliance with DON CIO and NAVIFOR requirements.
• Serve as a liaison with Navy Authorizing Officials (AOs), Program Managers, ISSMs, and ISSOs to provide validation expertise and risk advisory services.
• Mentor and provide oversight to Level I–III Validators, ensuring quality and consistency in validation deliverables.
• Apply subject matter expertise to evaluate complex systems, including classified environments, cross-domain solutions, and critical operational platforms.
• Track and report on validation status, risk posture, and compliance readiness to Navy leadership and government stakeholders.
• Ensure validation activities comply with DoD 8570/8140, DoDI 8510.01, SECNAV M-5239.1, and associated DON guidance.

Required Qualifications:

• Active DoD Secret clearance.
• Navy Qualified Validator – Level IV designation (must be from the Navy Certification Authority, current and active).
• Minimum of 10+ years of cybersecurity/IA experience, with at least 5 years supporting DoD or Navy programs.
• Extensive knowledge of the DoD RMF process, NIST SP 800-37, NIST SP 800-53, Navy Security Controls Assessor Risk Assessment Guide, and DoD/DON cybersecurity requirements.
• Demonstrated experience using Enterprise Mission Assurance Support Service (eMASS) for Navy systems.
• Proven experience leading cybersecurity assessments and validations for large, complex, or classified systems.
• Strong analytical, written, and verbal communication skills with the ability to present findings to senior leadership.
• Must meet DoD 8570/8140 requirements for IAM-II or IASAE-III (CISSP, CISM, CAP, or equivalent).

Job Tags

Similar Jobs