Amyx is seeking to hire a ConMon Lead with the ability to successfully track record for delivering large/complex projects on tme. This position will oversee and monitor all client authorized IT systems (re-authorization and new systems) throughout their life cycle for changes that may impact the security posture of the system. This shall be achieved by analyzing proposed or actual changes to IT systems to determine the security impact, and periodically assessing security controls and their effectiveness.
On-site performance is required for this task but can be conducted at any of the three Government sites (Letterkenny Army Depot, Fort Meade MD, Mark Center, VA)
Responsibilities include
- Being able to develop and maintain the ConMon Strategy
- Develop and maintain a ConMon SOP that outlines required SOP activities and artifacts that include the oversight and monitoring of IT systems throughout their lifecycle
- Validate that controls applicable to ConMon are properly implemented as part of the corresponding RMF package in eMASS.
- Provide IS status report through ConMon Dashboard on security control compliance tool visibility, POA&M status, CMRS visibility, asset visibility, FISMA/Scorecard Review, annual validation status, and other data points identified in the DISA ConMon SOP.
- This position will also need to be able to perfom continuous assessments of all security controls for all ISs under the purview of the organization and perform automated/manual security control monitoring of the IS and provide IS and Security Control Status Reports.
- This position requires experience with plannins, coordinating, scheduling, resoucing, tracking, documenting, executing, and analyzing audits and inspections.
- Experience applying compliance standads to large and complex IT environments.
- Must have experience being able to evaluate the design and effectiveness of controls and stnards to ensure compliancy IAW the applicable audits and inspections.
- Expert level of understanding vulnerabilities/weakness across complex IT environments and bility to understand applicabilty of security standards acoress technologies.
- Be experienced with communicating and coordinating at a functional and senor Governmnet Level and experience with data analysis and developing work products to enable government risk-based decisions.
- Must be eperienced with the development and executon of knowledge managment best practices and the automation of knowledge management grameworks to enchance processes and procedues related to the managment ofa project.
- Must be experienced with the development and coodination of guidance and work prodjecuts related to issues tracking managment, plan of actions and milestones, and ensuring transparency of vulnerabiltiies within an organization.
Technologies used
- Qmulos
- Splunk
- ACAS
- Axonius
- CheckMark
- BURP
- HBSS
Required
- This position requires a minimum bachelors degree (IT related field preferred).
- This position requires 6 or more years of expereince leading ConMOn/PPSM programs
- 5 or more years of IT Program Management experience leading audits and inspections in the DoD or Federal Government Environment.
- Certification requiments include having a DoD 8670 IAM/IAT Level III with a Top Secret Clerance and being SCI eligible.
Benefits include
- Medical, Dental, and Vision Plans (PPO & HSA options available)
- Flexible Spending Accounts (Health Care & Dependent Care FSA)
- Health Savings Account (HSA)
- 401(k) with matching contributions
- Roth
- Qualified Transportation Expense with matching contributions
- Short Term Disability
- Long Term Disability
- Life and Accidental Death & Dismemberment
- Basic & Voluntary Life Insurance
- Wellness Program
- PTO
- 11 Holidays
- Professional Development Reimbursement
Please contact talent@amyx.com with any questions!
Amyx is an Equal Opportunity employer. Amyx is committed to providing equal employment opportunity to all job seekers. Every qualified applicant receives focused consideration for employment and no one is discriminated against on the basis of race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability or protected veteran status. In addition to federal law requirements, Amyx complies with applicable state and local laws governing nondiscrimination in employment in every location in which the company has facilities. This applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training. Equal Opportunity Employer- Minorities/Females/Veterans/Individuals with Disabilities/Sexual Orientation/Gender Identity. Amyx is an E-Verify employer.
Amyx proudly and proactively takes affirmative action to advance employment of individuals who are minorities, women, protected veterans and individuals with disabilities.
Physical Demands
Employee needs to be able to sit at a workstation for extended periods; use hand(s) to handle or feel objects, tools, or controls; reach with hands and arms; talk and hear. Most positions require ability to work on desktop or laptop computer for extended periods of time reading, reviewing/analyzing information, and providing recommendations, summaries and/or reports in written format. Must be able to effectively communicate with others verbally and in writing. Employee may be required to occasionally lift and/or move moderate amounts of weight, typically less than 20 pounds. Regular and predictable attendance is essential.
