Navy Qualified Validator with Security Clearance
We are seeking aFully Qualified Navy Validator IV (FQNV4)to support Navy cybersecurity compliance and Risk Management Framework (RMF) activities. This role serves as an independent third-party assessor responsible for validating system security controls and ensuring compliance with Navy and DoD cybersecurity standards. *** Canndiate must possess aFully Qualified Validator Certificateissued by the Navy Certification Authority (CA) Target Education: Bachelor’s Degree in Computer Science from an accredited institutionTarget Experience: Minimum of10 yearsProfessional Experience InRMF package developmentCybersecurity Workforce (CSWF)-related workValidation and assessment of information systemsCertifications Requirements: CSWF /DOD IAM Level III 8570 Certification (at least one of the following):CAPCASP+ CECISMCISSP (or Associate)GSLCCCISOHCISPPClearance Requirements SECRET clearanceKey Responsibilities: Validation & Assessment Perform independent third-party validation of system security controlsPrepare and execute validation test procedures, plans, and reports (CDRL A012, A007)Ensure separation of duties between ISSM and Validator rolesRegister and maintain listing on the official Navy Qualified Validator registrySupport RMF package development and compliance verificationDevelop Security Assessment Plans (SAP) in coordination with ISSE and ISSMSubmit SAPs in accordance with Navy SCA RMF Business Rules and USN RMF Process GuideEvaluate discrepancies and recommend mitigation strategies (CDRL A010)Execute approved remediation methods including STIGs, patching, scanning, and network diagram creationCoordinate with ISSE and ISO to address and mitigate system weaknessesDetermine revalidation testing requirements as neededDocument residual risk in Security Assessment Reports (SAR) and Risk Assessment Reports (RAR)Ensure system compliance with Navy RMF guidelinesContribute to enclave-level SAR and RAR documentation, endorsed by Level II/III ValidatorsProvide timely support to Validator inquiries via in-person, phone, or emailRespond to all requests within one business day