Job Description

We are seeking a highly skilled IT Project Manager to lead our Assessment and Authorization (A&A) team supporting the Naval Surface Warfare Center Carderock Division (NSWCCD) and its detachments. The ideal candidate will be responsible for managing all deliverables and assist in managing the overall project schedule and budget. Additionally, this role will create and maintain all Risk Management Framework (RMF) authorization packages, artifacts, and perform Authority to Operate (ATO) maintenance.

Key Tasks and Responsibilities

• Function as the IT Project Manager responsible for all IT deliverables.
• Assist in managing the overall IT project schedule and budget.
• Coordinate all IT resources and maintain and track all IT assignments.
• Provide RMF package creation and RMF ATO maintenance support for all Information Systems (IS).
• Create all package documentation and create and document all artifacts as necessary.
• Adhere to the Navy-specific processes to identify and properly manage the risk of Navy Information Technology (IT) in accordance with the DoD Instruction (DoDI) 8510.01, Risk Management Framework for DoD Systems.
• Collaborate with designated officials throughout all steps of the RMF process.
• Develop and update documents as required by DoD, DON, NAVSEA, NSWCCD, and Navy Enterprise Mission Assurance Support Service (eMASS).
• Analyze, remediate, and document vulnerabilities during package creation activities.
• Scan for and apply remediation in accordance with the Defense Information Security Agency (DISA) Security Technical Implementation Guides (STIGs), Security Requirements Guide (SRG), Security Readiness Review (SRR), Navy SOPs, eMASS and generate DISA checklists and/or artifacts.
• Conduct vulnerability scanning of ISs utilizing Assured Compliance Assessment Solution (ACAS) and Security Content Automation Protocol (SCAP) of the ISs.
• Register new systems in the applicable Vulnerability Remediation Asset Manager (VRAM) database, as required.
• Prepare ISs for the authorization process within the timeframe prescribed by the Command Information System Security Manager (ISSM).
• Assess, document, and report all security controls within eMASS.
• Provide hardware and software data gathered during the ATO package creation to the NSWCCD Alloy Discovery Enterprise administrator every maintenance cycle.
• Perform ATO maintenance for all RMF authorization packages, including processing all packages for RMF re-authorization and continuous monitoring activities.

Job Requirements: