- Reston, Virginia, United States
Support TSA's Governance, Risk, and Compliance mission by conducting Security Impact Analyses, assessing changes, and ensuring compliance with NIST RMF and related cybersecurity frameworks.
Responsibilities
- Conduct Security Impact Analyses (SIAs) and assess Requests for Change (RFCs) to evaluate potential cybersecurity impacts to TSA information systems.
- Review and analyze RMF artifacts, security documentation, and supporting system records to support risk management and authorization activities.
- Assess system designs, technical solutions, implementation approaches, and emerging technologies for security, compliance, and risk considerations.
- Support security control assessments and evaluate the effectiveness of controls in accordance with established assessment methodologies.
- Perform cybersecurity risk analyses and provide recommendations to support authorization decisions and compliance requirements.
Requirements
- BA/BS degree in Cybersecurity, Information Technology, or a related discipline
- Nice to have: Familiarity with Security Authorization (SA) and Ongoing Authorization (OA) processes
- Nice to have: Knowledge of NIST Special Publications 800-30, 800-37, and 800-53A
- Nice to have: Experience reviewing security plans
- Nice to have: Contingency plans