Information Security Engineer

ASRC Federal is a leading government contractor furthering missions in space, public health and defense.

As an Alaska Native owned corporation, our work helps secure an enduring future for our shareholders.

Join our team and discover why we are a top veteran employer and Certified Great Place to Work™

ASRC Federal is looking for an experienced IA Policy and Compliance Certified Professional – Intermediate to support their work with the U.S.

Army Contracting Command (ACC) Chief Information Officer (CIO) G6 at Redstone Arsenal, AL.

The IA Professional serves as a subject matter expert (SME) and technical leader within the ACC Headquarters (HQ) Cybersecurity Division (CSD).

This position is responsible for the development, implementation, and maintenance of cybersecurity policies, standards, and procedures, ensuring compliance with applicable Department of Defense (DoD), Army, and ACC regulations.

The IA Professional will work with a team of personnel, providing guidance and oversight in all aspects of Risk Management Framework (RMF) activities, cybersecurity assessments, and incident response.

This role requires a deep understanding of cybersecurity principles, a strong analytical ability, and excellent communication skills to effectively convey complex information to both technical and non-technical audiences.

• Establish, maintain, and retain the Command Cybersecurity Standard Operating Procedures (SOPs) and Tactics, Techniques, and Procedures (TTPs).
• Develop and maintain an ACC CIO/G6 Cybersecurity portal for dissemination of key products and documentation.
• Execute the Risk Management Framework (RMF) lifecycle for multiple systems. Work with the other IA Professionals to maintain current Authority to Operate (ATO) status for these systems and provide RMF guidance and support to other ACC locations with similar systems.
• Ensure all Military, Government, and Contractor IT/Cybersecurity personnel maintain records of training and certifications in the approved repository. Administer and maintain the repository, tracking requirements and notifying users of deficiencies.
• Provide support for monthly briefings and reports to Senior Level Government Representatives on cybersecurity status and performance metrics (e.g., Cyber Scorecard). Report all deficiencies to the Government on a weekly basis.