Job specifications are intended to present a descriptive list of the range of duties performed by employees. Specifications are not intended to reflect all duties performed within the job.

SUMMARY:

The Information Security Specialist II (Cyber Auditor) supports cybersecurity compliance, audit readiness, and Risk Management Framework (RMF) validation activities for Department of Defense (DoD) information systems. This role focuses on independent assessment, audit support, and security control validation to ensure systems meet Authorization to Operate (ATO) requirements and maintain compliance with applicable cybersecurity policies.

The Cyber Auditor operates as a trusted agent to the Security Control Assessor (SCA) and supports continuous monitoring, assessment, and reporting of cybersecurity posture across classified and unclassified environments.

The position is not covered under the Service Contract Act (SCA) Davis Bacon Act (DBA), or union.

ESSENTIAL DUTIES AND RESPONSIBILITIES:

The Information Security Specialist II (Cyber Auditor) performs independent cybersecurity assessments and validates RMF security controls to support Authorization to Operate (ATO) decisions and ongoing compliance. This role reviews and maintains security documentation, monitors system vulnerabilities and POA&Ms, and supports audit readiness by ensuring adherence to DoD cybersecurity policies and continuous monitoring requirements.

Key Responsibilities include:

• Perform independent cybersecurity assessments and validate RMF security controls for ATO compliance.
• Develop, review, and maintain RMF artifacts including SAPs, SARs, and POA&Ms.
• Act as a trusted agent to the Security Control Assessor (SCA) supporting audit and validation activities.
• Conduct continuous monitoring using tools such as ACAS, SIEM, and other compliance systems.
• Identify, document, and track vulnerabilities, risks, and remediation actions.
• Maintain and update cybersecurity documentation, policies, and system records (e.g., eMASS).
• Evaluate system security configurations to ensure compliance with DoD and Navy cybersecurity requirements.
• Support audit readiness efforts, inspections, and responses to cybersecurity data calls.
• Collaborate with ISSMs, ISSOs, and system stakeholders on risk management and compliance activities.
• Ensure compliance with DoD 8570/8140 cybersecurity workforce requirements and training standards.
• Other duties as assigned.

EXPERIENCE, EDUCATION, AND LICENSURE:

• Greater than 4 years of overall experience.
o 2–5 years of practical experience in Cybersecurity, Engineering, Test & Evaluation (T&E), or Assessment & Authorization (A&A).

• Certifications (Required – One of the Following):
o CompTIA Security+ (CE)
o Certified Authorization Professional (CAP)
o CompTIA CASP+
o Project Management Professional (PMP)

• Education:
o High School Diploma or equivalent (additional experience may substitute for formal education).

• Active Secret clearance or ability to obtain and maintain a DoD Secret clearance.

• Desired Certifications-
o At least one of the following:
o CCNA Security
o CySA+
o GICSP
o GSEC
o Security+ CE
o CND
o SSCP

SKILLS, KNOWLEDGE AND ABILITIES:

The ISS II shall possess a strong understanding of the Risk Management Framework (RMF), legacy DIACAP processes, and DoD cybersecurity policies and procedures. Demonstrated ability to analyze and interpret security controls and findings, communicate audit results effectively to both technical and non-technical stakeholders, and maintain a detail-oriented, compliance-focused approach to documentation.

REASONABLE ACCOMMODATIONS:

Reasonable accommodation may be made to enable individuals with disabilities to perform the following essential functions.

SUPERVISORY RESPONSIBILITIES:

• None.

WORK ENVIRONMENT:

The work environment characteristics described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

While performing the duties of this job, the employee is exposed to weather conditions prevalent at the time. The noise level in the work environment is usually moderate.

PHYSICAL REQUIREMENTS:

The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the
essential functions.

While performing the duties of this job, the employee is occasionally required to stand; walk; sit; use hands to finger, handle, or feel objects, tools or controls; reach with hands and arms; climb stairs; balance; stoop, kneel, crouch or crawl; talk or hear; taste or smell. The employee must occasionally lift and/or move up to 25 pounds. Specific vision abilities required by the job include close vision, distance vision, color vision, peripheral vision, depth perception, and the ability to adjust focus.

TRAVEL:

N/A

WORK AUTHORIZATION/SECURITY CLEARANCE:

DoD Secret or higher security clearance, or the ability to obtain and maintain a Secret clearance. U.S. Citizenship is required.

ADDITIONAL QUALIFYING FACTORS:

Must have the ability to obtain and maintain a security clearance. In addition, a satisfactory background screening, negative drug test, positive references and proof of identity and legal authorization to work in the United States are required.

As an equal opportunity employer, The Tatitlek Corporation recognizes that our strength lies in our people. Discrimination and all unlawful harassment, including sexual harassment, in employment is not tolerated. We encourage success based on our individual merits and abilities without regard to race, color, religion, national origin, gender, sexual orientation, gender identity, age, disability, marital status, citizenship status, military status, protected Veteran’s status or employment.