Senior Information Assurance Analyst – Program Manager

Lucayan Technology Solutions LLC

. Lead the overall Information Assurance program for DAMIS under the direction of the System Owner/COR and the Program Information Systems Security Manager (P-ISSM), serving as IASO and the COR's main point of contact .

Posted 11/2/2026full-timeArlington • Virginia • United StatesSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in Information Assurance and Risk Management Framework processes, with a strong focus on maintaining system security posture within Microsoft Azure IaaS environments. Proficient in technical writing and communication, ensuring effective collaboration with stakeholders and compliance with federal regulations.

Highest-signal resume keywords

Information Assurance Program LeadershipRisk Management Framework (RMF) ManagementEMASS ProficiencyDoD 8570 IAM Level II CertificationContinuous Monitoring and Compliance Reporting

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

CybersecurityRisk Management Framework (RMF)Microsoft Azure IaaSDISA STIG ImplementationTechnical WritingData ArchitectureSoftware Development Life Cycle (SDLC)Vulnerability Compliance ManagementFISMA ReportingSystem Security Posture Management

Soft Skills

Organizational SkillsCommunication SkillsTeam LeadershipCollaborationProblem-Solving

Tools & Technologies

EMASSAPMSA&VTRACASSCAP Compliance CheckerDISA STIG Viewer

Certifications & Qualifications

DoD 8570 IAM Level II CertificationDoD 8570 IAT Level II CertificationCISSPSecurity+ CECySA+GSECCISMCGRC/CAPGSLC

Industry Keywords

FISMAPrivacy ActPIIHIPAAContinuous MonitoringComputer Emergency Response Team (CERT)Emergency Operations PlanSystem Authority to Operate (ATO)NIST SP 800-53Army Systems

Tech Stack

Tools & technologies

AzureCloudCyber SecurityOracleSDLC.NET

About the role

Key responsibilities & impact

Lead the overall Information Assurance program for DAMIS under the direction of the System Owner/COR and the Program Information Systems Security Manager (P-ISSM), serving as IASO and the COR's main point of contact
Manage the system's Risk Management Framework (RMF) process; prepare, coordinate, and submit security documentation for review and routing to the approving authority
Use eMASS to obtain and maintain the system Authority to Operate (ATO)
Perform weekly continuous monitoring of ATO requirements, STIGs, and Control Correlation Identifiers (CCIs), and report weekly ATO status with a remediation plan
Develop and maintain the RMF modernization and timeline plan with ATO milestones
Prepare and submit the ATO reauthorization package in eMASS before the current ATO expires
Manage the vulnerability compliance report
Lead annual contingency, security, and recovery tests, submitting documentation within 2 business days of test completion
Prepare FISMA-compliant reports and update information assurance data in APMS, A&VTR, and eMASS
Prepare and submit the Monthly Status Report (MSR) on RMF compliance, challenges, issues, and prior-month activity
Serve as a member of the agency's Computer Emergency Response Team (CERT), acknowledging incidents within 15 minutes and initiating approved mitigation within one hour during duty hours
Maintain the Emergency Operations Plan
Review system change requests and recommend implementation or alternatives based on IA vulnerabilities within 2 business days
Attend IA working groups, conferences, and recurring meetings virtually or in person, and provide minutes and recommendations within 2 business days
Supervise the IA Analyst, review deliverables for quality, and provide backup coverage for IA Analyst tasks

Requirements

What you’ll need

Bachelor's degree in computer science, cybersecurity, or a related field
At least 6 years of technical and compliance experience maintaining a system's security posture and managing security within a Microsoft Azure Infrastructure as a Service (IaaS) environment
At least 2 years of experience leading teams
Proven IA/cybersecurity experience managing the security posture of systems involving .NET, Windows, Azure, Oracle, and Red Hat
Strong background in data architecture, the Software Development Life Cycle (SDLC), and Red Hat and Windows security and administration
Extensive experience implementing and auditing against DISA Security Technical Implementation Guide (STIG) checklists to oversee RMF processes and continuous monitoring
Demonstrated ability to maintain a system's ATO and obtain a new ATO
Experience using eMASS
Strong technical writing, organizational, and communication skills, with the ability to work effectively with technical staff, program leadership, and Government stakeholders
Active favorably adjudicated Tier 3 (NACI) or higher federal background investigation prior to start
Ability to obtain and maintain a DoD Common Access Card (CAC)
DoD 8570 IAM Level II certification (e.g., CISSP, CGRC/CAP, CISM, GSLC) required at time of hire and maintained throughout employment
DoD 8570 IAT Level II certification (e.g., Security+ CE, CySA+, GSEC) required at time of hire and maintained throughout employment
CISSP satisfies both IAM Level II and IAT Level II
Preferred: Experience with ACAS, SCAP Compliance Checker, and DISA STIG Viewer
Preferred: Experience supporting systems through RMF changes such as the transition from NIST SP 800-53 Revision 4 to Revision 5
Preferred: Experience supporting Army systems hosted in the cArmy Azure Cloud
Preferred: Experience with systems handling Privacy Act, PII, or HIPAA-protected data
Preferred: Experience with FISMA reporting in APMS and A&VTR

Benefits

Comp & perks

US-based remote work arrangement
Monday through Friday schedule
Core hours of 7:30 a.m. to 4:30 p.m. Eastern Time
Occasional on-site visits to Arlington, VA as required (travel at employee's expense)