ATO Administrator – Senior

Role: ATO Administrator - Senior

Location: Quantico, VA

Foundational Qualifications: Candidate must possess at least one of the following:

• Education: Masters or PHD (IT, Cybersecurity, Computer Science, Info. Sys, Data Science, or SW Engineering); OR
• Training: One of the following approved DoD courses - WarU DCWF 722 ISSM – Advanced Playlist; M093861 Data Systems Engineering Officer; M09CHN1 Communications Chief; M09D3H1 Cybersecurity Managers; M09DRX1 MAGTF Communications Planner; OR
• Certifications: At least one of the following active certifications - CISM; CISSP; FITSP-M; GCIH; GCIA; GICSP; GSLC; ISSMP

Years of Experience: 7+ years; experience may be considered as alternative to foundational qualifications.

Clearance Level & Investigation: Secret

Job Description:

The ATO Administrator – Senior is responsible for the cybersecurity of a program, organization, system, or enclave. This includes, but is not limited to:

• Core Tasks:
  • Support necessary compliance activities (e.g., ensure system security configuration guidelines are followed, compliance monitoring occurs).
  • Continuously validate organization against policies/guidelines/procedures/regulations/laws to ensure compliance.
  • Acquire & manage necessary resources, including leadership support, financial resources, & key security personnel, to support IT security goals & objectives & reduce overall organizational risk.
  • Advise senior management (e.g., CIO) on risk levels & security posture.
  • Advise appropriate senior leadership or Authorizing Official of changes affecting organization’s cybersecurity posture.
  • Collect & maintain data needed to meet system cybersecurity reporting.
  • Communicate value of IT security throughout all levels of organization stakeholders.
  • Ensure security improvement actions are evaluated, validated, & implemented as required.
  • Ensure that cybersecurity inspections, tests, & reviews are coordinated for network environment.
  • Ensure that cybersecurity requirements are integrated into continuity planning for that system &/or organization(s).
  • Identify alternative information security strategies to address organizational security objective.
  • Identify IT security program implications of new technologies or technology upgrades.
  • Interpret patterns of noncompliance to determine their impact on levels of risk &/or overall effectiveness of enterprise’s cybersecurity program.
  • Manage monitoring of information security data sources to maintain organizational situational awareness.
  • Oversee information security training & awareness program.
  • Participate in development or modification of computer environment cybersecurity program plans & requirements.
  • Prepare, distribute, & maintain plans, instructions, guidance, & SOPs concerning security of network system(s) operations.
  • Provide system related input on cybersecurity requirements to be included in statements of work & other appropriate procurement documents.
  • Recognize a possible security violation & take appropriate action to report incident, as required.
  • Recommend resource allocations required to securely operate & maintain an organization’s cybersecurity requirements.
  • Supervise or manage protective or corrective measures when cybersecurity incident or vulnerability is discovered.
  • Track audit findings & recommendations to ensure appropriate mitigation actions are taken.
  • Promote awareness of security issues among management & ensure sound security principles are reflected in organization’s vision & goals.
  • Oversee policy standards & implementation strategies to ensure procedures & guidelines comply with cybersecurity policies.
  • Identify security requirements specific to an IT system in all phases of System Life Cycle.
  • Ensure plans of actions & milestones or remediation plans are in place for vulnerabilities identified during risk assessments, audits, inspections, etc.
  • Assure successful implementation & functionality