Cybersecurity & Information Assurance Specialist — Federal Health IT

Accountabilities:

Maintain DoD cybersecurity workforce qualification records, monitor certification expiration dates, and support compliance with applicable workforce qualification requirements.
Conduct periodic access reviews for designated systems, applications, and tools to ensure appropriate access management and security accountability.
Coordinate user account and credential lifecycle activities with relevant security stakeholders, ensuring that access-related processes remain properly documented.
Maintain information assurance documentation and security control records, ensuring that supporting evidence is accurate, complete, and audit-ready.
Support the collection, organization, and maintenance of Security Technical Implementation Guide (STIG) and Assured Compliance Assessment Solution (ACAS) evidence.
Contribute to Enterprise Mission Assurance Support Service (eMASS) records and assist with the preparation of documentation for customer security assessments.
Support ongoing security compliance activities and help ensure that technical environments remain aligned with applicable DoD cybersecurity requirements.
Report security incidents through established organizational procedures and coordinate with authorized incident response teams.
Provide guidance to field engineering and operational teams regarding security readiness, compliance obligations, and applicable information assurance requirements.
Collaborate with cybersecurity, engineering, and operational stakeholders to identify documentation gaps and support continuous security improvement.
Assist with security reviews, compliance monitoring, and assessment preparation to maintain operational readiness across federal healthcare technology environments.
Ensure information assurance records remain accurate, organized, and accessible for audits, inspections, and regulatory reviews.
Requirements:
At least 5 years of professional cybersecurity or information assurance experience supporting Department of Defense (DoD) environments.
Active U.S. Government Secret security clearance is mandatory.
Must meet the applicable DoD 8140 cybersecurity workforce qualification requirements, including the specified Information Assurance Management (IAM) Level II qualification.
Relevant certifications or approved equivalent qualifications include:
ISC2 Certified in Governance, Risk and Compliance (CGRC), formerly Certified Authorization Professional (CAP).
CompTIA SecurityX, formerly Advanced Security Practitioner (CASP+).
Other approved equivalent certifications meeting the applicable DoD 8140 requirements.
Demonstrated professional experience working with Security Technical Implementation Guides (STIGs), Assured Compliance Assessment Solution (ACAS), and Enterprise Mission Assurance Support Service (eMASS).
Strong understanding of DoD cybersecurity policies, information assurance requirements, and security compliance practices.
Experience maintaining security documentation, workforce qualification records, access reviews, and supporting evidence for security assessments.
Ability to coordinate account management and access review activities while maintaining appropriate security controls and documentation.
Familiarity with security incident reporting procedures and coordination with authorized response teams.
Strong organizational and documentation skills, with exceptional attention to detail and the ability to maintain accurate, audit-ready records.
Excellent communication and collaboration skills, with the ability to work effectively alongside technical, security, engineering, and operational teams.
Strong analytical and problem-solving abilities, with a proactive approach to identifying compliance gaps and supporting security readiness.
Ability to work independently, manage multiple responsibilities, and maintain accountability in a remote working environment.
Preferred Qualifications:
Certified Information Systems Security Professional (CISSP) certification.
Experience supporting Defense Health Agency (DHA) Risk Management Framework (RMF) packages.
Familiarity with Cybersecurity Maturity Model Certification (CMMC) Level 2 practices and related compliance requirements.
Previous experience supporting federal healthcare IT systems or other mission-critical government technology environments.
Benefits:
Eligible employees may enjoy the following benefits and professional development opportunities:
Comprehensive medical, dental, and vision insurance.
Life insurance and disability coverage.
401(k) retirement savings plan with a 100% company match on contributions up to 6%.
Paid time off (PTO) and paid holidays.
Company-supported professional certifications and continuing education opportunities.
Access to home-office equipment and remote working support.
Fitness and wellness reimbursement.
Weekly pay.
Team events and opportunities to connect with colleagues.
Fully remote working arrangement within the United States.
Opportunity to contribute to meaningful federal healthcare and national security missions.
Collaborative environment alongside experienced cybersecurity, engineering, and technical professionals.
Opportunities for professional growth and development in federal cybersecurity and information assurance.