Cybersecurity Certification & Accreditation Analyst Lead (59788)

{
  "content_hash": "b42db79e9c6ea81c56bf8afe24f3713bba6a3fc117b7d5c89583c2987f3244ee",
  "source_hash": "869b15e41bfcf9ccb94e5807e79294a9c818b911dc2817826219faa1b2ac35ec",
  "last_changed_at": "2026-05-31T19:06:22.044Z",
  "active_status": "active"
}

{
  "language": "en",
  "location": {
    "raw": "REMOTE (United States) - Remote, VA 22211; No Address, Remote, VA, 22211, USA",
    "city": null,
    "region": "VA",
    "country": "United States",
    "is_remote": true,
    "confidence": 0.8
  },
  "salary_max": null,
  "salary_min": null,
  "inferred_at": "2026-06-06T09:54:32.593Z",
  "launch_scope": {
    "reason": "english_us_canada",
    "included": true,
    "language": "en",
    "location": {
      "raw": "REMOTE (United States) - Remote, VA 22211; No Address, Remote, VA, 22211, USA",
      "city": null,
      "region": "VA",
      "country": "United States",
      "is_remote": true,
      "confidence": 0.8
    },
    "countries": [
      "United States"
    ]
  },
  "remote_policy": "remote",
  "salary_period": "week",
  "workplace_type": "remote",
  "salary_currency": null
}

{}

{
  "detail": {
    "city": "Remote",
    "jobId": 309290,
    "level": "Senior",
    "endDate": "",
    "legalId": 4330,
    "isHotJob": false,
    "jobShift": "Day",
    "jobTitle": "Cybersecurity Certification & Accreditation Analyst Lead (59788)",
    "location": "REMOTE (United States) - Remote, VA 22211",
    "startDate": "",
    "clientCode": "0QS68",
    "remoteType": "Fully Remote",
    "description": "<p style=\"text-align:center\"><span style=\"display:block; font-size:16px\"><span style=\"font-family:Arial,Helvetica,sans-serif\">BMA is seeking a <strong>Cybersecurity Certification &amp; Accreditation Analyst Lead</strong>&nbsp;to support the&nbsp;</span><span style=\"color:black; font-family:Arial,Helvetica,sans-serif\">DLA JETS Cybersecurity Assessment and Authorization Analyst (CS AAA) Support Services&nbsp;</span><span style=\"font-family:Arial,Helvetica,sans-serif\">program. This is a fully</span><strong style=\"font-family:Arial,Helvetica,sans-serif\"> remote </strong><span style=\"font-family:Arial,Helvetica,sans-serif\">position and </span><strong style=\"font-family:Arial,Helvetica,sans-serif\">contingent</strong><span style=\"font-family:Arial,Helvetica,sans-serif\"> on contract award.</span></span></p>\n\n<p>&nbsp;</p>\n\n<p><span style=\"display:block; font-size:14px\"><span style=\"font-family:Arial,Helvetica,sans-serif\"><strong>Job Summary&nbsp;</strong></span></span></p>\n\n<p><span style=\"display:block; font-size:14px\"><span style=\"font-family:Arial,Helvetica,sans-serif\">BMA is seeking a Cybersecurity Certification and Accreditation (C&amp;A) Analyst to support our DLA Cybersecurity Assessment and Authorization Analyst (CS AAA) Support Services contract. The analyst serves as a cybersecurity Subject Matter Expert (SME) supporting the DLA J6 Cybersecurity Program, providing technical expertise in the authorization of information systems and cybersecurity compliance activities across DLA&rsquo;s enterprise IT and Operational Technology (OT) environments. This role supports the assessment, authorization, and continuous monitoring of information systems under the Risk Management Framework (RMF) and ensures compliance with DoD cybersecurity policies, federal information security regulations, and DLA cybersecurity implementation guidance. The analyst performs cybersecurity validation activities throughout the DoD System Development Life Cycle (SDLC) and assists program offices, Information System Security Managers (ISSMs), and Authorizing Officials (AOs) in maintaining the security posture of DLA systems. The position supports complex enterprise environments including large and small enclaves, applications, and outsourced IT services, ensuring security controls are implemented, assessed, and monitored in accordance with NIST SP 800-53, DoD cybersecurity policy, and the DLA RMF Implementation Process Guide.</span></span></p>\n\n<p><span style=\"display:block; font-size:14px\"><span style=\"font-family:Arial,Helvetica,sans-serif\"><strong>Key Responsibilities include but are not limited to:</strong></span></span></p>\n\n<ol>\n\t<li><span style=\"display:block; font-size:14px\"><span style=\"font-family:Arial,Helvetica,sans-serif\"><strong>Cybersecurity Assessment and Authorization Support:</strong> Provides cybersecurity subject matter expertise supporting authorization and accreditation activities for DLA information systems. Assists ISSMs and AOs with implementation of the DoD Risk Management Framework throughout the system development lifecycle, conducts security control reviews and authorization package analysis, and supports cybersecurity activities across IT, Platform IT (PIT), and Operational Technology / Facility Related Control Systems environments.</span></span></li>\n\t<li><span style=\"display:block; font-size:14px\"><span style=\"font-family:Arial,Helvetica,sans-serif\"><strong>RMF Execution:</strong> Supports execution of all phases of the RMF authorization process, including system categorization, security control selection, implementation validation, security control assessment, authorization, and continuous monitoring. Assists in the development and maintenance of RMF documentation and supports system registration and cybersecurity documentation management within the Enterprise Mission Assurance Support Service environment.</span></span></li>\n\t<li><span style=\"display:block; font-size:14px\"><span style=\"font-family:Arial,Helvetica,sans-serif\"><strong>Security Control Assessment and Compliance Validation:</strong> Evaluates the implementation and effectiveness of security controls defined in NIST SP 800-53 and DoD cybersecurity guidance. Conducts security control validation reviews, identifies non-compliant controls and vulnerabilities, determines severity levels, assesses impacts to system authorization status, and provides mitigation strategies and remediation recommendations.</span></span></li>\n\t<li><span style=\"display:block; font-size:14px\"><span style=\"font-family:Arial,Helvetica,sans-serif\"><strong>Cybersecurity Risk Analysis and Vulnerability Management: </strong>Analyzes security findings and vulnerabilities identified through cybersecurity assessments and scanning tools. Determines the operational and security impact of vulnerabilities on system authorization and risk posture, supports remediation activities, tracks vulnerabilities through Plans of Action and Milestones (POA&amp;M), and assists with monitoring vulnerabilities identified through ACAS scans and IAVA alerts.</span></span></li>\n\t<li><span style=\"display:block; font-size:14px\"><span style=\"font-family:Arial,Helvetica,sans-serif\"><strong>Documentation, Reporting, and Briefings:</strong> Develops cybersecurity assessment documentation supporting system authorization packages, maintains documentation repositories for system and organizational artifacts, prepares and delivers briefings to government stakeholders and senior leadership, and provides cybersecurity status reports and recommendations to Program Managers, ISSMs, and Authorizing Officials.</span></span></li>\n\t<li><span style=\"display:block; font-size:14px\"><span style=\"font-family:Arial,Helvetica,sans-serif\"><strong>Cybersecurity Program Coordination:</strong> Coordinates cybersecurity activities with program offices, system managers, and security personnel across the DLA enterprise to support effective execution of authorization and compliance efforts.</span></span></li>\n</ol>\n\n<p>&nbsp;</p>\n\n<p><span style=\"display:block; font-size:14px\"><span style=\"font-family:Arial,Helvetica,sans-serif\"><strong>Clearance Requirements&nbsp;</strong></span></span></p>\n\n<p><span style=\"display:block; font-size:14px\"><span style=\"font-family:Arial,Helvetica,sans-serif\">There is a<strong> Secret&nbsp;</strong>Security clearance requirement for this position.&nbsp;</span></span></p>\n\n<p>&nbsp;</p>\n\n<p><span style=\"display:block; font-size:14px\"><span style=\"font-family:Arial,Helvetica,sans-serif\"><strong>Required Skills &amp; Certifications&nbsp;</strong></span></span></p>\n\n<ul>\n\t<li><span style=\"display:block; font-size:14px\"><span style=\"font-family:Arial,Helvetica,sans-serif\">Current DoD 8570.01/8140 IAM Level III certification that includes one or more of the following: CISM, CISSP, GSLC, or CCISO.</span></span></li>\n\t<li><span style=\"display:block; font-size:14px\"><span style=\"font-family:Arial,Helvetica,sans-serif\">Five or more years of relevant Certification and Accreditation (C&amp;A) and/or RMF cybersecurity experience.</span></span></li>\n\t<li><span style=\"display:block; font-size:14px\"><span style=\"font-family:Arial,Helvetica,sans-serif\">Demonstrated experience supporting DoD cybersecurity programs and system authorization processes.</span></span></li>\n\t<li><span style=\"display:block; font-size:14px\"><span style=\"font-family:Arial,Helvetica,sans-serif\">Strong understanding of Risk Management Framework (RMF) implementation and NIST cybersecurity standards.</span></span></li>\n\t<li><span style=\"display:block; font-size:14px\"><span style=\"font-family:Arial,Helvetica,sans-serif\">Experience assessing security controls and conducting authorization reviews within large, complex enterprise environments.</span></span></li>\n\t<li><span style=\"display:block; font-size:14px\"><span style=\"font-family:Arial,Helvetica,sans-serif\">Ability to evaluate vulnerabilities, assess risk, and determine impacts to system authorization status.</span></span></li>\n\t<li><span style=\"display:block; font-size:14px\"><span style=\"font-family:Arial,Helvetica,sans-serif\">Strong analytical, technical documentation, and communication skills.</span></span></li>\n</ul>\n\n<p>&nbsp;</p>\n\n<p><span style=\"display:block; font-size:14px\"><span style=\"font-family:Arial,Helvetica,sans-serif\"><strong>Desired Skills &amp; Certifications&nbsp;</strong></span></span></p>\n\n<ul>\n\t<li><span style=\"display:block; font-size:14px\"><span style=\"font-family:Arial,Helvetica,sans-serif\">Experience supporting DoD or DLA program offices.</span></span></li>\n\t<li><span style=\"display:block; font-size:14px\"><span style=\"font-family:Arial,Helvetica,sans-serif\">Experience supporting DoD or DLA environments.</span></span></li>\n\t<li><span style=\"display:block; font-size:14px\"><span style=\"font-family:Arial,Helvetica,sans-serif\">Bachelor&rsquo;s degree in Information Technology, Cybersecurity, Computer Science, Engineering, Business Administration, or a related field.</span></span></li>\n\t<li><span style=\"display:block; font-size:14px\"><span style=\"font-family:Arial,Helvetica,sans-serif\">Five or more years of leadership experience with progressively increasing responsibility managing technical teams, programs, or contracts.</span></span></li>\n\t<li><span style=\"display:block; font-size:14px\"><span style=\"font-family:Arial,Helvetica,sans-serif\">At least one year of program or project management experience.</span></span></li>\n\t<li><span style=\"display:block; font-size:14px\"><span style=\"font-family:Arial,Helvetica,sans-serif\">Current Project Management Professional (PMP) certification or an equivalent recognized project management certification.</span></span></li>\n\t<li><span style=\"display:block; font-size:14px\"><span style=\"font-family:Arial,Helvetica,sans-serif\">Current Risk Management Professional certification such as PMP-RMP, CRISC, CISA, CISM, CGRC, or RIMS-CRMP.</span></span></li>\n</ul>\n\n<p>&nbsp;</p>\n\n<p><span style=\"display:block; font-size:14px\"><span style=\"font-family:Arial,Helvetica,sans-serif\"><strong>Other Duties</strong></span></span></p>\n\n<ul>\n\t<li><span style=\"display:block; font-size:14px\"><span style=\"font-family:Arial,Helvetica,sans-serif\">Able to travel within a week&#39;s notice.</span></span></li>\n\t<li><span style=\"display:block; font-size:14px\"><span style=\"font-family:Arial,Helvetica,sans-serif\">This job description is not designed to cover or contain a comprehensive listing of activities, duties, or responsibilities that are required of the employee for this job. </span></span></li>\n\t<li><span style=\"display:block; font-size:14px\"><span style=\"font-family:Arial,Helvetica,sans-serif\">Duties, responsibilities, and activities may change at any time with or without notice.&nbsp;</span></span></li>\n</ul>\n\n<p><span style=\"display:block; font-size:14px\"><span style=\"font-family:Arial,Helvetica,sans-serif\">&nbsp;</span></span></p>\n\n<p><span style=\"display:block; font-size:14px\"><span style=\"font-family:Arial,Helvetica,sans-serif\"><strong>Overview</strong></span></span></p>\n\n<p><span style=\"display:block; font-size:14px\"><span style=\"font-family:Arial,Helvetica,sans-serif\">BMA is an employee-owned small business headquartered in Huntsville, AL that provides superior customer service by empowering all levels of our staff to make timely decisions to produce high-quality results. BMA fosters an environment of passion, precision, and dedication in order to fulfill our commitments to our partners, government, and country.</span></span></p>\n\n<p><span style=\"display:block; font-size:14px\"><span style=\"font-family:Arial,Helvetica,sans-serif\">&nbsp;</span></span></p>\n\n<p><span style=\"display:block; font-size:14px\"><span style=\"font-family:Arial,Helvetica,sans-serif\"><strong>Benefits</strong></span></span></p>\n\n<p><span style=\"display:block; font-size:14px\"><span style=\"font-family:Arial,Helvetica,sans-serif\">We believe that our employees well-being is paramount to our success so our benefits package has been crafted with that in mind. We offer multiple healthcare coverage options to include low deductible, high deductible, and plans eligible for our Health Savings Account (HSA) option. Along with medical coverage, employees have dental, vision, accident &amp; illness, short- and long-term disability all available to them. BMA proudly maintains a 401(k) plan with an industry leading 6% match that can include profit sharing based on company performance. Lastly, being an employee-owned company means that BMA offers a 100% Employee Stock Ownership Plan (ESOP), providing eligible employees the opportunity to earn stock in BMA, subject to plan eligibility and vesting requirements.&nbsp;</span></span></p>\n\n<p><span style=\"display:block; font-size:14px\"><span style=\"font-family:Arial,Helvetica,sans-serif\">&nbsp;</span></span></p>\n\n<p><span style=\"display:block; font-size:14px\"><span style=\"font-family:Arial,Helvetica,sans-serif\"><strong>AAP &amp; EEO Statement</strong><br />\n&nbsp;Beshenich Muir &amp; Associates, LLC (BMA) is an Equal opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regards to race, color, religion, religious creed, gender, sexual orientation, gender identity, gender expression, transgender, pregnancy, marital status, national origin, ancestry, citizenship status, age, disability, protected Veteran Status, genetics or any other characteristics protected by applicable Federal, State, or Local Law.&nbsp;</span></span></p>\n",
    "jobCategory": "Professional Services",
    "salaryRange": "",
    "socialMedia": {
      "xLink": null,
      "emailLink": {
        "subject": "Bma%20Technical%20Services%20Inc%20Job%20Opportunity%20Cybersecurity%20Certification%20%26%20Accreditation%20Analyst%20Lead%20%2859788%29",
        "summary": "BMA%20is%20seeking%20a%20Cybersecurity%20Certification%20%26%20Accreditation%20Analyst%20Lead%C2to%20support%20the%C2DLA%20JETS%20Cybersecurity%20Assessment%20and%20Authorization%20Analyst%20%28CS%20AAA%29%20Support%20Services%C2program.%20This%20is%20a%20fully%20remote%20position%20and%20contingent%20on%20contract%20award.%0A%0A%C2%0A%0AJob%20Summary%C2%0A%0ABMA%20is%20seeking%20a%20Cybersecurity%20Certification%20and%20Accreditation%20%28C%26A%29%20Analyst%20to%20support%20our%20DLA%20Cybersecurity%20Assessment%20and%20Authorization%20Analyst%20%28CS%20AAA%29%20Support%20Services%20contract.%20The%20analyst%20serves%20as%20a%20cybersecurity%20Subject%20Matter%20Expert%20%28SME%29%20supporting%20the%20DLA%20J6%20Cybersecurity%20Program%2C%20providing%20technical%20expertise%20in%20the%20authorization%20of%20information%20systems%20and%20cybersecurity%20compliance%20activities%20across%20DLA%E2%80%99s%20enterprise%20IT%20and%20Operational%20Technology%20%28OT%29%20environments.%20This%20role%20supports%20the%20assessment%2C%20authorization%2C%20and%20continuous%20monitoring%20of%20information%20systems%20under%20the%20Risk%20Management%20Framework%20%28RMF%29%20and%20ensures%20compliance%20with%20DoD%20cybersecurity%20policies%2C%20federal%20information%20security%20regulations%2C%20and..."
      },
      "facebookLink": {
        "redirectUri": "",
        "facebookAppId": "773759036043100"
      },
      "linkedInLink": {}
    },
    "isQuickApply": false,
    "positionType": "Full Time",
    "countryPaidIn": "",
    "googleJobJson": "{\"@context\":\"https://schema.org/\",\"@type\":\"JobPosting\",\"title\":\"Cybersecurity Certification & Accreditation Analyst Lead (59788)\",\"identifier\":\"J0QS68309290\",\"url\":\"https://www.paycomonline.net/v4/ats/web.php/portal/BD1EA60AEEB10C351C9D11F5ACCAE8B8/jobs/309290\",\"image\":\"https://www.paycomonline.net/v4/ats/web.php/application/style/logo?clientkey=BD1EA60AEEB10C351C9D11F5ACCAE8B8\",\"datePosted\":\"2026-02-27\",\"description\":\"Job DetailsLevel: SeniorJob Location: REMOTE (United States) - Remote, VA 22211Position Type: Full TimeEducation Level: Not SpecifiedTravel Percentage: Occasionally Job Shift: DayJob Category: Professional ServicesBMA is seeking a Cybersecurity Certification &amp; Accreditation Analyst Lead&nbsp;to support the&nbsp;DLA JETS Cybersecurity Assessment and Authorization Analyst (CS AAA) Support Services&nbsp;program. This is a fully remote position and contingent on contract award.\\n\\n&nbsp;\\n\\nJob Summary&nbsp;\\n\\nBMA is seeking a Cybersecurity Certification and Accreditation (C&amp;A) Analyst to support our DLA Cybersecurity Assessment and Authorization Analyst (CS AAA) Support Services contract. The analyst serves as a cybersecurity Subject Matter Expert (SME) supporting the DLA J6 Cybersecurity Program, providing technical expertise in the authorization of information systems and cybersecurity compliance activities across DLA&rsquo;s enterprise IT and Operational Technology (OT) environments. This role supports the assessment, authorization, and continuous monitoring of information systems under the Risk Management Framework (RMF) and ensures compliance with DoD cybersecurity policies, federal information security regulations, and DLA cybersecurity implementation guidance. The analyst performs cybersecurity validation activities throughout the DoD System Development Life Cycle (SDLC) and assists program offices, Information System Security Managers (ISSMs), and Authorizing Officials (AOs) in maintaining the security posture of DLA systems. The position supports complex enterprise environments including large and small enclaves, applications, and outsourced IT services, ensuring security controls are implemented, assessed, and monitored in accordance with NIST SP 800-53, DoD cybersecurity policy, and the DLA RMF Implementation Process Guide.\\n\\nKey Responsibilities include but are not limited to:\\n\\n\\n\\tCybersecurity Assessment and Authorization Support: Provides cybersecurity subject matter expertise supporting authorization and accreditation activities for DLA information systems. Assists ISSMs and AOs with implementation of the DoD Risk Management Framework throughout the system development lifecycle, conducts security control reviews and authorization package analysis, and supports cybersecurity activities across IT, Platform IT (PIT), and Operational Technology / Facility Related Control Systems environments.\\n\\tRMF Execution: Supports execution of all phases of the RMF authorization process, including system categorization, security control selection, implementation validation, security control assessment, authorization, and continuous monitoring. Assists in the development and maintenance of RMF documentation and supports system registration and cybersecurity documentation management within the Enterprise Mission Assurance Support Service environment.\\n\\tSecurity Control Assessment and Compliance Validation: Evaluates the implementation and effectiveness of security controls defined in NIST SP 800-53 and DoD cybersecurity guidance. Conducts security control validation reviews, identifies non-compliant controls and vulnerabilities, determines severity levels, assesses impacts to system authorization status, and provides mitigation strategies and remediation recommendations.\\n\\tCybersecurity Risk Analysis and Vulnerability Management: Analyzes security findings and vulnerabilities identified through cybersecurity assessments and scanning tools. Determines the operational and security impact of vulnerabilities on system authorization and risk posture, supports remediation activities, tracks vulnerabilities through Plans of Action and Milestones (POA&amp;M), and assists with monitoring vulnerabilities identified through ACAS scans and IAVA alerts.\\n\\tDocumentation, Reporting, and Briefings: Develops cybersecurity assessment documentation supporting system authorization packages, maintains documentation repositories for system and organizational artifacts, prepares and delivers briefings to government stakeholders and senior leadership, and provides cybersecurity status reports and recommendations to Program Managers, ISSMs, and Authorizing Officials.\\n\\tCybersecurity Program Coordination: Coordinates cybersecurity activities with program offices, system managers, and security personnel across the DLA enterprise to support effective execution of authorization and compliance efforts.\\n\\n\\n&nbsp;\\n\\nClearance Requirements&nbsp;\\n\\nThere is a Secret&nbsp;Security clearance requirement for this position.&nbsp;\\n\\n&nbsp;\\n\\nRequired Skills &amp; Certifications&nbsp;\\n\\n\\n\\tCurrent DoD 8570.01/8140 IAM Level III certification that includes one or more of the following: CISM, CISSP, GSLC, or CCISO.\\n\\tFive or more years of relevant Certification and Accreditation (C&amp;A) and/or RMF cybersecurity experience.\\n\\tDemonstrated experience supporting DoD cybersecurity programs and system authorization processes.\\n\\tStrong understanding of Risk Management Framework (RMF) implementation and NIST cybersecurity standards.\\n\\tExperience assessing security controls and conducting authorization reviews within large, complex enterprise environments.\\n\\tAbility to evaluate vulnerabilities, assess risk, and determine impacts to system authorization status.\\n\\tStrong analytical, technical documentation, and communication skills.\\n\\n\\n&nbsp;\\n\\nDesired Skills &amp; Certifications&nbsp;\\n\\n\\n\\tExperience supporting DoD or DLA program offices.\\n\\tExperience supporting DoD or DLA environments.\\n\\tBachelor&rsquo;s degree in Information Technology, Cybersecurity, Computer Science, Engineering, Business Administration, or a related field.\\n\\tFive or more years of leadership experience with progressively increasing responsibility managing technical teams, programs, or contracts.\\n\\tAt least one year of program or project management experience.\\n\\tCurrent Project Management Professional (PMP) certification or an equivalent recognized project management certification.\\n\\tCurrent Risk Management Professional certification such as PMP-RMP, CRISC, CISA, CISM, CGRC, or RIMS-CRMP.\\n\\n\\n&nbsp;\\n\\nOther Duties\\n\\n\\n\\tAble to travel within a week&#39;s notice.\\n\\tThis job description is not designed to cover or contain a comprehensive listing of activities, duties, or responsibilities that are required of the employee for this job. \\n\\tDuties, responsibilities, and activities may change at any time with or without notice.&nbsp;\\n\\n\\n&nbsp;\\n\\nOverview\\n\\nBMA is an employee-owned small business headquartered in Huntsville, AL that provides superior customer service by empowering all levels of our staff to make timely decisions to produce high-quality results. BMA fosters an environment of passion, precision, and dedication in order to fulfill our commitments to our partners, government, and country.\\n\\n&nbsp;\\n\\nBenefits\\n\\nWe believe that our employees well-being is paramount to our success so our benefits package has been crafted with that in mind. We offer multiple healthcare coverage options to include low deductible, high deductible, and plans eligible for our Health Savings Account (HSA) option. Along with medical coverage, employees have dental, vision, accident &amp; illness, short- and long-term disability all available to them. BMA proudly maintains a 401(k) plan with an industry leading 6% match that can include profit sharing based on company performance. Lastly, being an employee-owned company means that BMA offers a 100% Employee Stock Ownership Plan (ESOP), providing eligible employees the opportunity to earn stock in BMA, subject to plan eligibility and vesting requirements.&nbsp;\\n\\n&nbsp;\\n\\nAAP &amp; EEO Statement\\n&nbsp;Beshenich Muir &amp; Associates, LLC (BMA) is an Equal opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regards to race, color, religion, religious creed, gender, sexual orientation, gender identity, gender expression, transgender, pregnancy, marital status, national origin, ancestry, citizenship status, age, disability, protected Veteran Status, genetics or any other characteristics protected by applicable Federal, State, or Local Law.&nbsp;\\nQualifications\",\"responsibilities\":\"BMA is seeking a Cybersecurity Certification &amp; Accreditation Analyst Lead&nbsp;to support the&nbsp;DLA JETS Cybersecurity Assessment and Authorization Analyst (CS AAA) Support Services&nbsp;program. This is a fully remote position and contingent on contract award.\\n\\n&nbsp;\\n\\nJob Summary&nbsp;\\n\\nBMA is seeking a Cybersecurity Certification and Accreditation (C&amp;A) Analyst to support our DLA Cybersecurity Assessment and Authorization Analyst (CS AAA) Support Services contract. The analyst serves as a cybersecurity Subject Matter Expert (SME) supporting the DLA J6 Cybersecurity Program, providing technical expertise in the authorization of information systems and cybersecurity compliance activities across DLA&rsquo;s enterprise IT and Operational Technology (OT) environments. This role supports the assessment, authorization, and continuous monitoring of information systems under the Risk Management Framework (RMF) and ensures compliance with DoD cybersecurity policies, federal information security regulations, and DLA cybersecurity implementation guidance. The analyst performs cybersecurity validation activities throughout the DoD System Development Life Cycle (SDLC) and assists program offices, Information System Security Managers (ISSMs), and Authorizing Officials (AOs) in maintaining the security posture of DLA systems. The position supports complex enterprise environments including large and small enclaves, applications, and outsourced IT services, ensuring security controls are implemented, assessed, and monitored in accordance with NIST SP 800-53, DoD cybersecurity policy, and the DLA RMF Implementation Process Guide.\\n\\nKey Responsibilities include but are not limited to:\\n\\n\\n\\tCybersecurity Assessment and Authorization Support: Provides cybersecurity subject matter expertise supporting authorization and accreditation activities for DLA information systems. Assists ISSMs and AOs with implementation of the DoD Risk Management Framework throughout the system development lifecycle, conducts security control reviews and authorization package analysis, and supports cybersecurity activities across IT, Platform IT (PIT), and Operational Technology / Facility Related Control Systems environments.\\n\\tRMF Execution: Supports execution of all phases of the RMF authorization process, including system categorization, security control selection, implementation validation, security control assessment, authorization, and continuous monitoring. Assists in the development and maintenance of RMF documentation and supports system registration and cybersecurity documentation management within the Enterprise Mission Assurance Support Service environment.\\n\\tSecurity Control Assessment and Compliance Validation: Evaluates the implementation and effectiveness of security controls defined in NIST SP 800-53 and DoD cybersecurity guidance. Conducts security control validation reviews, identifies non-compliant controls and vulnerabilities, determines severity levels, assesses impacts to system authorization status, and provides mitigation strategies and remediation recommendations.\\n\\tCybersecurity Risk Analysis and Vulnerability Management: Analyzes security findings and vulnerabilities identified through cybersecurity assessments and scanning tools. Determines the operational and security impact of vulnerabilities on system authorization and risk posture, supports remediation activities, tracks vulnerabilities through Plans of Action and Milestones (POA&amp;M), and assists with monitoring vulnerabilities identified through ACAS scans and IAVA alerts.\\n\\tDocumentation, Reporting, and Briefings: Develops cybersecurity assessment documentation supporting system authorization packages, maintains documentation repositories for system and organizational artifacts, prepares and delivers briefings to government stakeholders and senior leadership, and provides cybersecurity status reports and recommendations to Program Managers, ISSMs, and Authorizing Officials.\\n\\tCybersecurity Program Coordination: Coordinates cybersecurity activities with program offices, system managers, and security personnel across the DLA enterprise to support effective execution of authorization and compliance efforts.\\n\\n\\n&nbsp;\\n\\nClearance Requirements&nbsp;\\n\\nThere is a Secret&nbsp;Security clearance requirement for this position.&nbsp;\\n\\n&nbsp;\\n\\nRequired Skills &amp; Certifications&nbsp;\\n\\n\\n\\tCurrent DoD 8570.01/8140 IAM Level III certification that includes one or more of the following: CISM, CISSP, GSLC, or CCISO.\\n\\tFive or more years of relevant Certification and Accreditation (C&amp;A) and/or RMF cybersecurity experience.\\n\\tDemonstrated experience supporting DoD cybersecurity programs and system authorization processes.\\n\\tStrong understanding of Risk Management Framework (RMF) implementation and NIST cybersecurity standards.\\n\\tExperience assessing security controls and conducting authorization reviews within large, complex enterprise environments.\\n\\tAbility to evaluate vulnerabilities, assess risk, and determine impacts to system authorization status.\\n\\tStrong analytical, technical documentation, and communication skills.\\n\\n\\n&nbsp;\\n\\nDesired Skills &amp; Certifications&nbsp;\\n\\n\\n\\tExperience supporting DoD or DLA program offices.\\n\\tExperience supporting DoD or DLA environments.\\n\\tBachelor&rsquo;s degree in Information Technology, Cybersecurity, Computer Science, Engineering, Business Administration, or a related field.\\n\\tFive or more years of leadership experience with progressively increasing responsibility managing technical teams, programs, or contracts.\\n\\tAt least one year of program or project management experience.\\n\\tCurrent Project Management Professional (PMP) certification or an equivalent recognized project management certification.\\n\\tCurrent Risk Management Professional certification such as PMP-RMP, CRISC, CISA, CISM, CGRC, or RIMS-CRMP.\\n\\n\\n&nbsp;\\n\\nOther Duties\\n\\n\\n\\tAble to travel within a week&#39;s notice.\\n\\tThis job description is not designed to cover or contain a comprehensive listing of activities, duties, or responsibilities that are required of the employee for this job. \\n\\tDuties, responsibilities, and activities may change at any time with or without notice.&nbsp;\\n\\n\\n&nbsp;\\n\\nOverview\\n\\nBMA is an employee-owned small business headquartered in Huntsville, AL that provides superior customer service by empowering all levels of our staff to make timely decisions to produce high-quality results. BMA fosters an environment of passion, precision, and dedication in order to fulfill our commitments to our partners, government, and country.\\n\\n&nbsp;\\n\\nBenefits\\n\\nWe believe that our employees well-being is paramount to our success so our benefits package has been crafted with that in mind. We offer multiple healthcare coverage options to include low deductible, high deductible, and plans eligible for our Health Savings Account (HSA) option. Along with medical coverage, employees have dental, vision, accident &amp; illness, short- and long-term disability all available to them. BMA proudly maintains a 401(k) plan with an industry leading 6% match that can include profit sharing based on company performance. Lastly, being an employee-owned company means that BMA offers a 100% Employee Stock Ownership Plan (ESOP), providing eligible employees the opportunity to earn stock in BMA, subject to plan eligibility and vesting requirements.&nbsp;\\n\\n&nbsp;\\n\\nAAP &amp; EEO Statement\\n&nbsp;Beshenich Muir &amp; Associates, LLC (BMA) is an Equal opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regards to race, color, religion, religious creed, gender, sexual orientation, gender identity, gender expression, transgender, pregnancy, marital status, national origin, ancestry, citizenship status, age, disability, protected Veteran Status, genetics or any other characteristics protected by applicable Federal, State, or Local Law.&nbsp;\\n\",\"employmentType\":\"FULL_TIME\",\"hiringOrganization\":{\"@type\":\"Organization\",\"name\":\"BMA TECHNICAL SERVICES INC\",\"logo\":\"https://www.paycomonline.net/v4/ats/web.php/application/style/logo?clientkey=BD1EA60AEEB10C351C9D11F5ACCAE8B8\"},\"jobLocation\":{\"@type\":\"Place\",\"address\":{\"streetAddress\":\"No Address \",\"addressLocality\":\"Remote\",\"addressRegion\":\"VA\",\"postalCode\":22211,\"addressCountry\":\"USA\"}},\"industry\":\"Professional Services\",\"validThrough\":\"-0001-11-30\",\"workHours\":\"Day\",\"educationRequirements\":\"Not Specified\"}",
    "applyAvailable": true,
    "educationLevel": "Not Specified",
    "qualifications": "",
    "descriptionTitle": "Description",
    "travelPercentage": "Occasionally ",
    "jobYoutubeVideoId": "",
    "legalRevisionDate": {
      "date": "2025-05-05T14:10:08.000Z",
      "timezone": "America/Chicago",
      "timezone_type": 3
    },
    "secondaryLocations": [],
    "primaryPhoneCountry": "US",
    "primaryPhoneEnabled": true,
    "qualificationsTitle": "Qualifications",
    "primaryPhoneRequired": true,
    "primaryPhoneNumberDoesNotExist": false
  },
  "preview": {
    "jobId": 309290,
    "isHotJob": false,
    "jobTitle": "Cybersecurity Certification & Accreditation Analyst Lead (59788)",
    "postedOn": "",
    "locations": "REMOTE (United States) - Remote, VA 22211",
    "remoteType": "Fully Remote",
    "description": "BMA is seeking a Cybersecurity Certification & Accreditation Analyst Lead to support the DLA JETS Cybersecurity Assessment and Authorization Analyst (...",
    "positionType": "Full Time"
  },
  "detail_meta": {
    "url": "https://portal-applicant-tracking.us-cent.paycomonline.net/api/ats/job-postings/309290",
    "http_status": 200,
    "content_type": "application/json",
    "response_bytes": 38524
  },
  "detail_errors": []
}