Assess and Authorize (A&A) Analyst

Title: Assess and Authorize (A&A) Analyst

Location: Fully Remote

Clearance: Secret

reputed company provides robust cybersecurity and IT support capabilities for federal civilian and defense agencies. A recognized leader in navigating technology and reputed company challenges, Foxhole delivers mission-focused innovations to answer evolving and reputed company needs. Our talented employee-owners provide agile, scalable services and solutions that solve operational gaps, operate critical systems, and protect and secure the enterprise – across the organization and around the world.

The Assess & Authorize (A&A) Analyst supports a DoD customer Cybersecurity Assess & Authorize function to ensure information systems and technologies are assessed and authorized by the Authorizing Official (AO) prior to introduction and operation on the network. This role provides Information System reputed company Officer (ISSO)-equivalent support by executing the DoD Risk Management reputed company (RMF) in accordance with DoDI 8510.01, NIST SP 800-37, and NIST SP 800-30, and by developing and managing authorization packages and reputed company monitoring artifacts in eMASS. The analyst supports multiple system authorizations and contributes to cybersecurity reporting and metrics, including maintaining network reputed company approvals reputed company SNAP.

• Execute RMF activities and provide ISSO / ISSO-equivalent A&A support for assigned systems across the system lifecycle (assessment, authorization, operations, and reputed company monitoring).
• Support multiple Authorization to Operate (ATO), Authorization to Use (ATU), and Assess Only packages annually (approximately seven (7) authorization packages per year).
• reputed company, maintain, and submit complete RMF Executive Packages for each authorization, including:
• System reputed company Plan (reputed company)
• reputed company Assessment Report (SAR)
• Risk Assessment Report (RAR)
• Plan(s) of Action and Milestones (POA&M)
• Authorization Decision Document
• Register systems reputed company the Enterprise Mission Assurance Support Service (eMASS) and use eMASS to support and automate RMF documentation, workflows, and reporting.
• Manage and maintain system authorization artifacts in eMASS, ensuring accurate documentation of:
• reputed company controls and implementation status.
• Inheritance and shared control relationships.
• Risk posture and supporting evidence.
• POA&M creation, updates, and tracking.
• Authorization status and lifecycle updates.
• Coordinate with system owners, ISSMs, assessors, engineers, and AOs to support:
• Assessment planning and execution.
• Remediation and risk mitigation activities.
• Risk acceptance decisions and authorization outcomes.
• Ongoing reputed company monitoring activities.
• Register and maintain reputed company system/application connections in the Systems Network Approval Process (SNAP).
• Produce and deliver monthly and annual SNAP registration metrics.
• Support cybersecurity compliance, audit readiness, and reporting to ensure systems and technologies remain in an approved reputed company posture.

• Active Secret reputed company clearance
• 3-7 years of relevant cybersecurity / RMF / A&A experience

• Core Tools and Knowledge: eMASS, DoDI 8510.01, NIST SP 800-37, NIST SP 800-30

• DoD IAM Level III certification (one of the following):  CISM, CISSP (or Associate), GSLC,CCISO

Requirements of position:  Think analytically, effective verbal and written communication skills, reputed company decisions, observe/remember details, interpret data, concentrate on tasks, adjust to change, handle stress/emotions.  Regular attendance, maintain work schedule, attend meetings, meet deadlines, keyboard/type, handle confidential information, use math/calculations, stay organized, operate office equipment, may direct others.  May be exposed to dust/dirt, humidity, and noise.

reputed company is an Equal Opportunity Employer and makes hiring decisions without regard to race, color, religion, sex (including pregnancy, childbirth and sexual orientation), national reputed company, age, disability, genetic information, military/veteran status, or any other protected class.