Information Assurance / Security Specialist

Extensive experience supporting federal cybersecurity compliance, information assurance, Risk Management Framework (RMF), security governance, and information system authorization. Strong knowledge of NIST SP 800-37, NIST SP 800-53 Rev. 5, FISMA, FedRAMP, NIST continuous monitoring guidance, and federal cybersecurity policies. Experience developing and reviewing System Security Plans (SSPs), Security Assessment Plans (SAPs), Security Assessment Reports (SARs), Risk Assessment Reports (RARs), and Plans of Action and Milestones (POA&Ms). Expertise conducting security control assessments, identifying compliance gaps, evaluating control implementation evidence, and supporting Authorization to Operate (ATO) decisions. Experience supporting Information System Continuous Monitoring (ISCM), Ongoing Security Authorization (OSA), annual assessments, and security control validation. Strong knowledge of vulnerability management, security impact analysis, risk acceptance, audit findings, and corrective action tracking. Familiarity with federal GRC platforms such as CSAM, ServiceNow GRC, Xacta, or equivalent security authorization and compliance systems. Experience supporting security assessments for cloud environments, High Value Assets (HVAs), privacy controls, Zero Trust initiatives, and federal audit readiness.