Package Submitting Office (PSO), Navy Qualified Validator (NQV) - Falconwood Inc.

Falconwood is a woman-owned, veteran-owned company providing consultation and programmatic support to Department of Defense Information Technology (IT) initiatives and programs. We provide expert advice and consultation on a diverse range of IT subjects, focusing on acquisition, policy, cybersecurity, engineering, and process development.

The Cloud PSO / NQV will be responsible for the below responsibilities supporting PEO Digital.

Package Submitting Office (PSO) is responsible for completing PSO Triage reviews for Risk Management Framework (RMF) Step 2 and Step 5. Tasks include: enforcing standardization, performing quality assurance reviews, supporting checkpoint meetings (when required), and submitting authorization packages to the Navy Authoring Official (NAO) for authorization decision in alignment with the latest RMF Process Guide (RPG).

Navy Qualified Validator (NQV) as an independent representative of the Security Control Assessor (SCA), is responsible for completed Validator reviews for RMF Step 4 in alignment with the RPG and SCA Risk Assessment Guide.

This position will primarily support Cloud authorizations under PEO Digital but may also support NMCI and ONE-NET type authorization when needed.

• Perform quality assurance reviews for RMF Steps 2, 4, and 5 in alignment with the Navy RPG and SCA RAG.
• Must have experience with Navy Cloud authorizations including but not limited to the DoD Cloud Computing SRG, Cloud Service Models, Impact Levels, DISA Provisional Authorizations, FedRamp, and Inheritance.
• Perform all coordinating functions with the Information System Security Engineers (ISSE), Information System Security Manager (ISSM), PSO, SCA Liaisons and the NAO for Security Authorization Package review, processing requirements and issues.
• Works closely with the ISSE to execute vulnerability testing (ACAS, STIGS, etc.) and recommend remediations and/or mitigation strategies.
• Review control assessments to assess the current state. Ensure enough evidence is provided to support control compliance.
• Provide technical expertise for cloud technologies and guide the team on specific cloud requirements.
• Experienced in using Enterprise Mission Assurance Support Service (eMASS) for authorization reviews.

• Secret Clearance Required
• Bachelor's Degree or relevant experience
• Minimum 3 years applied Department of Navy cybersecurity, Assessment and Authorization (A&A) experience
• Navy Qualified Validator (NQV) certification in good standing