Arlo Solutions LLC

Role Description The Deputy Director of Contracts & Governance serves as the company’s authoritative FAR, SBA, and contractual governance authority, responsible for overseeing the full contract lifecycle while establishing and enforcing enterprise contract governance, internal controls, and risk management frameworks. This role ensures the organization operates with discipline, consistency, and audit defensibility across FAR/DFARS compliance, SBA 8(a) execution, Joint Ventures, and Mentor-Protégé Program (MPP) structures, supporting both current small business operations and long-term transition to full-and-open competition. Location: REMOTE Key Responsibilities - Contract Governance & Internal Controls: - Establish and maintain a formal contracts governance framework, including policies, approval authorities, escalation paths, and risk tolerance thresholds. - Define and enforce contract review boards, delegation of authority matrices, and signature authorities. - Ensure consistency and compliance across all contract actions, including primes, subcontracts, JVs, and MPP entities. - Serve as the executive owner of contractual internal controls, supporting audit readiness and enterprise risk management. - FAR, DFARS & Regulatory Authority: - Act as the company’s primary FAR/DFARS authority, providing definitive interpretation and guidance. - Ensure compliance with FAR Parts 1–16, 19, 31, 44, 52, DFARS, and agency supplements. - Provide governance oversight for contract type selection, pricing structures, and clause applicability. - Review and approve deviations, exceptions, and non-standard terms in alignment with governance standards. - 8(a), JV & Mentor-Protégé Program (MPP) Governance: - Oversee governance and compliance for SBA 8(a) contracts, including eligibility, performance of work, and reporting obligations. - Govern Joint Venture and MPP contractual structures, ensuring alignment with SBA approvals, operating agreements, and workshare requirements. - Ensure compliance with FAR 52.219-14, SBA affiliation rules, JV profit distribution, and mentor/protégé responsibilities. - Coordinate with executive leadership on SBA annual reviews, data calls, and compliance reporting. - Pre-Award & Proposal Governance: - Lead contractual governance for proposal development, including RFP review, compliance matrices, and contractual risk assessments. - Establish standards for go/no-go decision support, documenting contractual and regulatory risk posture. - Ensure proposals align with corporate governance policies, approved contract types, and risk tolerance. - Post-Award Administration & Risk Management: - Govern execution of contracts, modifications, options, novation's, and closeout activities. - Lead negotiations with Contracting Officers and prime contractors within approved authority limits. - Oversee claims, disputes, and protests in coordination with Legal and executive leadership. - Ensure governance controls over data rights, intellectual property, and security obligations. - Subcontracts & Supplier Governance: - Establish governance standards for subcontracting, including flow-downs, make/buy decisions, and workshare compliance. - Ensure subcontract execution aligns with FAR 52.244-2, SBA requirements, and JV agreements. - Oversee supplier risk management, performance monitoring, and corrective actions. - Audit Readiness & Enterprise Risk Management: - Maintain audit-ready contract files and governance documentation supporting DCAA, DCMA, SBA, and agency reviews. - Partner with Finance to ensure governance alignment on allowable costs, SCA wage determinations, indirect rates, and billing compliance. - Lead corrective action planning and continuous improvement efforts related to contractual findings. - Leadership & Governance Maturity: - Build and lead a Contracts team with strong FAR, SBA, and governance discipline. - Develop and maintain contracts policies, SOPs, templates, training, and governance artifacts. - Support enterprise maturity initiatives aligned with ISO, CMMI, and internal controls. Responsibilities and/or Success Factors - FAR decisions are consistent, defensible, and audit-ready, with minimal corrective actions required. - 8(a), JV, and Mentor-Protégé Program structures remain fully compliant, with no eligibility, workshare, or affiliation findings. - Contract risks are identified early, documented, and mitigated prior to award or execution. - Proposals demonstrate strong contractual compliance and clear risk positioning, supporting wins without downstream issues. - Audits (DCAA, DCMA, SBA) are supported with complete, well-organized documentation and timely responses. - Contract documentation, approvals, and records are complete, accurate, and audit-ready at all times, with governance workflows consistently followed and no material findings related to file management, approvals, or version control. - Governance processes are applied consistently across the enterprise, including primes, subcontracts, JVs, and MPP entities. - The Contracts function operates as a trusted business partner, enabling growth without compromising compliance. - Executive leadership receives clear, actionable guidance on contractual, regulatory, and governance risk. Qualifications - Bachelor’s degree in business, Legal Studies, Finance, or related field (JD or Master’s preferred). - 7+ years of federal government contracting experience with deep FAR application. - Demonstrated experience supporting SBA 8(a) contracts and compliance activities. - Direct experience with Joint Ventures and SBA Mentor-Protégé Program (MPP) structures. - Proven experience establishing contract governance frameworks and internal controls. - Strong working knowledge of FAR, DFARS, SBA regulations, and agency supplements. - Experience supporting audits, protests, claims, and disputes. - Executive-level communication and decision-making capability. Desired Qualifications - Experience guiding organizations through small business to full-and-open transitions. - NCMA certification (CPCM, CFCM, CCCM). - Experience with DoD and civilian agencies. - Familiarity with Deltek Costpoint, ServiceNow, and GovCon CRM tools. - Experience supporting ISO, CMMI, or similar governance frameworks. AAP Statement We are proud to be an Affirmative Action and Equal Opportunity Employer and as such, we evaluate qualified candidates in full consideration without regard to race, color, religion, sex, sexual orientation, gender identity, marital status, national origin, age, disability status, protected veteran status, and any other protected status.

Company Summary Arlo Solutions (Arlo) is an information technology consulting services company that specializes in delivering technology solutions. Our reputation reflects the high quality of the talented Arlo Solutions team and the consultants working in partnership with our customers. Our mission is to understand and meet the needs of both our customers and consultants by delivering quality, value-added solutions. Our solutions are designed and managed to not only reduce costs, but to improve business processes, accelerate response time, improve services to end-users, and give our customers a competitive edge, now and into the future. Position Summary The Director of Contracts & Governance serves as the company’s authoritative FAR, SBA, and contractual governance authority, responsible for overseeing the full contract lifecycle while establishing and enforcing enterprise contract governance, internal controls, and risk management frameworks. This role ensures the organization operates with discipline, consistency, and audit defensibility across FAR/DFARS compliance, SBA 8(a) execution, Joint Ventures, and Mentor-Protégé Program (MPP) structures, supporting both current small business operations and long-term transition to full-and-open competition. Location: REMOTE Key Responsibilities: Contract Governance & Internal Controls - Establish and maintain a formal contracts governance framework, including policies, approval authorities, escalation paths, and risk tolerance thresholds. - Define and enforce contract review boards, delegation of authority matrices, and signature authorities. - Ensure consistency and compliance across all contract actions, including primes, subcontracts, JVs, and MPP entities. - Serve as the executive owner of contractual internal controls, supporting audit readiness and enterprise risk management. FAR, DFARS & Regulatory Authority - Act as the company’s primary FAR/DFARS authority, providing definitive interpretation and guidance. - Ensure compliance with FAR Parts 1–16, 19, 31, 44, 52, DFARS, and agency supplements. - Provide governance oversight for contract type selection, pricing structures, and clause applicability. - Review and approve deviations, exceptions, and non-standard terms in alignment with governance standards. 8(a), JV & Mentor-Protégé Program (MPP) - Governance Oversee governance and compliance for SBA 8(a) contracts, including eligibility, performance of work, and reporting obligations. - Govern Joint Venture and MPP contractual structures, ensuring alignment with SBA approvals, operating agreements, and workshare requirements. - Ensure compliance with FAR 52.219-14, SBA affiliation rules, JV profit distribution, and mentor/protégé responsibilities. - Coordinate with executive leadership on SBA annual reviews, data calls, and compliance reporting. Pre-Award & Proposal - Governance Lead contractual governance for proposal development, including RFP review, compliance matrices, and contractual risk assessments. - Establish standards for go/no-go decision support, documenting contractual and regulatory risk posture. - Ensure proposals align with corporate governance policies, approved contract types, and risk tolerance. Post-Award Administration & Risk Management - Govern execution of contracts, modifications, options, novation's, and closeout activities. - Lead negotiations with Contracting Officers and prime contractors within approved authority limits. - Oversee claims, disputes, and protests in coordination with Legal and executive leadership. - Ensure governance controls over data rights, intellectual property, and security obligations. Subcontracts & Supplier Governance - Establish governance standards for subcontracting, including flow-downs, make/buy decisions, and workshare compliance. - Ensure subcontract execution aligns with FAR 52.244-2, SBA requirements, and JV agreements. - Oversee supplier risk management, performance monitoring, and corrective actions. Audit Readiness & Enterprise Risk Management - Maintain audit-ready contract files and governance documentation supporting DCAA, DCMA, SBA, and agency reviews. - Partner with Finance to ensure governance alignment on allowable costs, SCA wage determinations, indirect rates, and billing compliance. - Lead corrective action planning and continuous improvement efforts related to contractual findings. Leadership & Governance Maturity - Build and lead a Contracts team with strong FAR, SBA, and governance discipline. - Develop and maintain contracts policies, SOPs, templates, training, and governance artifacts. - Support enterprise maturity initiatives aligned with ISO, CMMI, and internal cont. Responsibilities and/or Success Factors: - FAR decisions are consistent, defensible, and audit-ready, with minimal corrective actions required. 8(a), JV, and Mentor-Protégé Program structures remain fully compliant, with no eligibility, workshare, or affiliation findings. - Contract risks are identified early, documented, and mitigated prior to award or execution. - Proposals demonstrate strong contractual compliance and clear risk positioning, supporting wins without downstream issues. - Audits (DCAA, DCMA, SBA) are supported with complete, well-organized documentation and timely responses. - Contract documentation, approvals, and records are complete, accurate, and audit-ready at all times, with governance workflows consistently followed and no material findings related to file management, approvals, or version control. - Governance processes are applied consistently across the enterprise, including primes, subcontracts, JVs, and MPP entities. - The Contracts function operates as a trusted business partner, enabling growth without compromising compliance. - Executive leadership receives clear, actionable guidance on contractual, regulatory, and governance risk Required Qualifications Including Certificates: - Bachelor’s degree in business, Legal Studies, Finance, or related field (JD or Master’s preferred) - 10+ years of federal government contracting experience with deep FAR application. - Demonstrated experience supporting SBA 8(a) contracts and compliance activities. - Direct experience with Joint Ventures and SBA Mentor-Protégé Program (MPP) structures. - Proven experience establishing contract governance frameworks and internal controls. - Strong working knowledge of FAR, DFARS, SBA regulations, and agency supplements. - Experience supporting audits, protests, claims, and disputes. - Executive-level communication and decision-making capability. Desired Qualifications: - Experience guiding organizations through small business to full-and-open transitions. - NCMA certification (CPCM, CFCM, CCCM). - Experience with DoD and civilian agencies. - Familiarity with Deltek Costpoint, ServiceNow, and GovCon CRM tools. - Experience supporting ISO, CMMI, or similar governance frameworks AAP Statement We are proud to be an Affirmative Action and Equal Opportunity Employer and as such, we evaluate qualified candidates in full consideration without regard to race, color, religion, sex, sexual orientation, gender identity, marital status, national origin, age, disability status, protected veteran status, and any other protected status.

Company Summary Arlo Solutions (Arlo) is an information technology consulting services company that specializes in delivering technology solutions. Our reputation reflects the high quality of the talented Arlo Solutions team and the consultants working in partnership with our customers. Our mission is to understand and meet the needs of both our customers and consultants by delivering quality, value-added solutions. Our solutions are designed and managed to not only reduce costs, but to improve business processes, accelerate response time, improve services to end-users, and give our customers a competitive edge, now and into the future. Position Overview The National Oceanic and Atmospheric Administration (NOAA) National Marine Fisheries Service (NMFS) Office of the Chief Information Officer (OCIO) is seeking a Windows System Administrator to support design, deployment, modernization, and operations of Windows Server–based workloads hosted in Google Cloud Platform (GCP). This role will partner with infrastructure, security, and application teams to deliver stable, secure, automated Windows environments, with strong emphasis on scripting, virtualization, and identity integration. Work Location: Remote Clearance: Public Trust Job Responsibilities and/or Success Factors - Cloud-hosted Windows engineering: - Build, configure, and operate Windows Server workloads in cloud environments (preferably GCP) including image standards, patching patterns, performance tuning, and availability design. - Operating systems & virtualization: - Administer and troubleshoot Windows Server environments. - Identity & access integration: - Implement and maintain Active Directory (AD) integrations, Group Policy, and IAM (Identity & Access Management) controls; support role-based access, privileged access patterns, and audit-ready configuration. - Automation & scripting: - Develop and maintain PowerShell automation for provisioning, configuration drift remediation, patch orchestration, and routine operations; contribute to Automation standards and reusable runbooks. - Infrastructure as Code (IaC): - Partner with platform/DevOps teams to implement Windows infrastructure using IaC patterns (templates/modules), promoting repeatability and environment consistency. - Backup & resilience: - Implement and test Backup & Recovery procedures; support Disaster Recovery planning, runbooks, and periodic failover testing aligned to recovery objectives. - Monitoring & troubleshooting: - Integrate Windows workloads into enterprise Monitoring solutions; triage incidents, perform root-cause analysis, and drive permanent fixes and operational improvements. - Security hardening: - Apply secure baselines, vulnerability remediation, and configuration controls aligned to organizational policies; coordinate remediation efforts across OS, identity, and network layers. - Documentation & knowledge transfer: - Produce and maintain living documentation (runbooks, SOPs, diagrams) and support handoffs to operations teams. Education and Minimum Qualifications - 5+ years hands-on experience administering and supporting Windows Server in enterprise environments (mid-level profile). - Strong experience with PowerShell for administration and automation. - Practical experience with Active Directory (AD) and Group Policy administration in production environments. - Experience supporting Backup & Recovery, Disaster Recovery, and Monitoring practices for Windows workloads. - Ability to operate in mixed environments where Linux is often required alongside Windows (triage, interoperability, handoffs). - Strong troubleshooting skills, documentation discipline, and ability to collaborate across infra, security, and app teams. Desired Qualifications - Experience running Windows workloads on Google Cloud Platform (GCP) (Compute Engine, networking patterns, IAM integration concepts). - Google Cloud certifications (any relevant certification is a plus). - Experience applying STIG (Security Technical Implementation Guide) baselines and supporting compliance/hardening validation for Windows systems. - Experience implementing or contributing to Infrastructure as Code (IaC) and automation pipelines for Windows platforms. - Exposure to endpoint/server hardening standards, vulnerability management workflows, and audit support. AAP Statement We are proud to be an Affirmative Action and Equal Opportunity Employer and as such, we evaluate qualified candidates in full consideration without regard to race, color, religion, sex, sexual orientation, gender identity, marital status, national origin, age, disability status, protected veteran status, and any other protected status.

Company Summary Arlo Solutions (Arlo) is an information technology consulting services company that specializes in delivering technology solutions. Our reputation reflects the high quality of the talented Arlo Solutions team and the consultants working in partnership with our customers. Our mission is to understand and meet the needs of both our customers and consultants by delivering quality, value-added solutions. Our solutions are designed and managed to not only reduce costs, but to improve business processes, accelerate response time, improve services to end-users, and give our customers a competitive edge, now and into the future. Position Overview The Mid Information System Security Officer (ISSO) (IAM 2) will support the Defense Security Cooperation Agency (DSCA) Cybersecurity (CYBR) team by providing expertise in Risk Management Framework (RMF) activities, security control assessments, controls validation, and continuous monitoring. The role involves ensuring compliance with RMF, IT, and Federal Information System Controls Audit Manual (FISCAM) guidelines, and supporting the cybersecurity responsibilities detailed in the DSCA CYBR Service Catalog. Work Location: Fully Remote Clearance: Active Secret Clearance Job Responsibilities and/or Success Factors - Produce all required DOD compliance documentation for RMF, Audit Response and Remediation, Cyber Task Orders, Required Scorecards, Privacy documentation, and other compliance requirements as detailed in the DSCA CYBR Service Catalog. - Draft and coordinate cybersecurity-related documentation to meet required standards, controls, and metrics. - Support all steps of the RMF process (Steps 0-6) required to gain and maintain DOD Information Network (DODIN) and agency commercial network authority to operate. - Assist in categorization, control selection, implementation, and tailoring support, as well as support of assessments from the ISSO role. - Prepare and validate controls in eMASS packages for assessment and review. - Ensure that control requirements are well-defined and that necessary documentation and evidence are gathered for validation and assessment. - Work in the DOD GRC tool Enterprise Mission Assurance Support Service (eMASS) to support control validation. - Conduct continuous monitoring of information systems to detect vulnerabilities, threats, and security incidents. - Utilize security tools and technologies to perform regular scans, assessments, and analysis of system vulnerabilities. - Maintain and update continuous monitoring processes and procedures to ensure they are effective and aligned with organizational requirements. - Assist in the configuration and maintenance of security tools and technologies provided by the CSSP. - Assist in the detection, analysis, and response to cybersecurity incidents. - Participate in incident response activities, including triage, containment, eradication, and recovery. - Document and report on incident response activities, providing detailed analysis and recommendations for improvement. - Provide support to the Watch Officer in monitoring and managing cybersecurity events and incidents. - Maintain situational awareness of the organization's security posture and emerging threats. - Assist with the performance of daily and ad hoc/on-demand vulnerability scans, monthly audit scans, and monthly discovery scans. - Provide weekly vulnerability compliance reporting to ISSMs. - Review and adjust assets, subnets, credentials, and policies to properly manage C5ISR provided Assured Compliance Assessment Solution (ACAS) solutions. - Track and ensure configuration compliance of Enterprise Security Services (ESS) Suite with RMF, ATO, and Inspection requirements. - Assist with the maintenance of completed security waiver forms in coordination with EADSD and ISSM (PMO). - Work with TSD to implement effective scanning, COAMS System Registration, and Continuous Monitoring Scoring (CMRS) Tagging. - Maintain and update Ports, Protocols, and Services Management (PPSM) records, including emergency and exception requests. - Support the maintenance and accuracy of DoD Allow List entries. - Maintain accurate and up-to-date documentation of all RMF, IT, and FISCAM controls validation activities. - Prepare and submit regular reports on the status of security controls, RMF activities, and DevSecOps pipeline security. - Provide detailed documentation and evidence to support security assessments and audits. - Support the maintenance and configuration needed to maintain accurate ingestion of logs from all assets. - Provide summaries of events/incidents, including time of event/incident, anomalous activity identified, asset names and IPs, affected users, and POC for outreach/additional actions. - Complete Cybersecurity Incident Reporting Forms and assist with the detection and analysis of cybersecurity events and incidents. - Support accurate IR POC list, accurate hardware/software and IP inventory, and accurate summary of event/incident. - Document efforts involved in mitigating cybersecurity-related events/incidents that occur within the enterprise. - Support the generation of performance monitoring reports to monitor asset availability. - Support the generation of system health and security posture reports for system owners and ISSMs. - Support accurate hardware and software inventory, accurate ingestion of logs from all assets, and accurate system performance and security posture baselines. - Conduct specified areas of focus/detail for trend analysis. - Support migration information provided by affected system ISSM and report vulnerabilities to appropriate system ISSMs/POCs. - Assist with the reporting to outside agencies, including JFHQ, battle stations, external leadership, and other DOD Agencies. - Support the correlated agency-level POA&Ms with the coordination of POA&Ms from DSCA to outside entities. - Help complete the Cybersecurity Incident Reporting Form, including additional inputs such as personnel logs, system logs, event logs, and accurate software and hardware inventory list. Education and Minimum Qualifications - Must be a US Citizen - Active Secret Clearance - Bachelor’s degree in computer science, Information Technology, Cybersecurity, or a related field is required OR additional four (4) years of experience - Strong understanding of Risk Management Framework (RMF) processes and security control assessments, including experience with categorization, control selection, implementation, and assessment. - Minimum of two (2) years of relevant experience in cybersecurity, information assurance, or a related field. - Experience in IT controls validation and familiarity with Federal Information System Controls Audit Manual (FISCAM) guidelines. - Experience in incident response, continuous monitoring, and vulnerability management. - Proficiency in using security assessment tools and platforms such as eMASS (Enterprise Mission Assurance Support Service). - Familiarity with continuous monitoring processes and tools. - Experience with incident response processes and tools. - Knowledge of cybersecurity frameworks and standards, such as NIST, ISO 27001, and CIS Controls. Desired Qualifications: - Certifications such as CSSP, CISM, CISA, CAP, Security+, or equivalent is highly desirable. - Experience with OKTA - Experience as an ISSO or otherwise prior experience with IT Risk Management Framework Support. AAP Statement We are proud to be an Affirmative Action and Equal Opportunity Employer and as such, we evaluate qualified candidates in full consideration without regard to race, color, religion, sex, sexual orientation, gender identity, marital status, national origin, age, disability status, protected veteran status, and any other protected status.

Role Description The Compliance Manager is responsible for establishing, maintaining, and continuously improving Arlo Solutions’ enterprise compliance posture. This role serves as the organizational authority for compliance frameworks including CMMC, CMMI, ISO (9001/27001), and other regulatory, contractual, and customer-driven requirements. The Compliance Manager leads certification efforts, audits, assessments, and continuous improvement initiatives while partnering with executive leadership, IT, cybersecurity, HR, contracts, and program teams. Location: Remote Responsibilities and/or Success Factors - Compliance Program Management: - Lead enterprise compliance strategy and governance. - Develop and maintain compliance roadmaps, project plans, or readiness trackers for upcoming assessments and recertifications. - Audit & Assessment Readiness: - Own day-to-day execution of compliance programs for CMMC, ISO, and CMMI, ensuring milestones and deliverables remain on schedule. - Partner with cross-functional teams (IT, HR, Contracts, Finance, Program Teams) to ensure compliance requirements are implemented and sustained. - Lead internal readiness reviews, mock audits, and gap assessments against applicable standards. - Coordinate external audits and assessments, including scheduling, preparation, artifact management, and response tracking. - Serve as a primary point of contact for assessors, auditors, and external consultants. - Establish and manage a robust policy, procedure, and evidence collection framework to support successful compliance program execution. - Risk, Issue, and POA&M Management: - Maintain and manage compliance risks, findings, and POA&Ms through closure. - Support remediation planning, prioritization, and execution monitoring. - Escalate high-risk gaps or audit blockers with recommended mitigation actions. Qualifications - Demonstrated experience supporting one or more of the following frameworks: CMMC, CMMI, ISO, SOC2. - Strong audit, risk, and governance knowledge. - Ability to translate regulatory requirements into operations. - Proven ability to manage multiple priorities, stakeholders, and deadlines in a fast-paced environment. - Ability to work effectively with both technical and non-technical teams. - Strong influencing skills to drive alignment, accountability, and compliance adoption across stakeholders. - Effective negotiation skills to resolve competing priorities, secure resources, and achieve compliance deadlines. - 8+ years in compliance, audit, or risk management roles. - Experience in government contracting or regulated environments. - Proven leadership of certification and audit efforts. Desired Qualifications - CMMC CCP or CCA. - CISA or CRCMP. AAP Statement We are proud to be an Affirmative Action and Equal Opportunity Employer and as such, we evaluate qualified candidates in full consideration without regard to race, color, religion, sex, sexual orientation, gender identity, marital status, national origin, age, disability status, protected veteran status, and any other protected status.

This description is a summary of our understanding of the job description. Click on 'Apply' button to find out more. Role Description The Department of Defense’s (DoW) Office of the Undersecretary of War for Research and Engineering (OUSW (R&E)) is at the forefront of supporting the DoW with the adoption of innovative technologies such as data, analytics, and artificial intelligence to help accelerate predictions, forecasts, and interpretations for both strategic and tactical decisions across the enterprise. The Security Control Assessor (SCA) plays a pivotal role in comprehensively understanding the cybersecurity posture of a given capability within OUSW (R&E). SCAs must go beyond a mere compliance focus on controls to articulate the inherent risks of systems. Success in this position requires expertise in statutory guidance such as: - NIST 800 series - DoW 8500.01 - DoW 8140.03 - ISO 27001 - COBIT - DoW RMF - Operation Vulcan Logic (OVL) The Senior SCA provides authoritative risk determinations and recommendations critical for the Authorizing Official (AO) to grant an Authority to Operate (ATO). Their assessments integrate technical rigor with regulatory compliance, ensuring a robust security posture and informing strategic decision-making. Work Location: Full time remote. Candidates in the Washington DC Metropolitan preferred. Travel requirements will vary with location, however, expect approximately 10% to 25%. Clearance: Top Secret with SCI eligibility Qualifications - Strong background in information security systems management (ISSM), risk management, and governance, risk and compliance (GRC). - Strong client focus and commitment to continuous improvement. - Ability to proactively network and establish relationships. - Experience supporting and assessing risks within a CI/CD DevSecOps environment. - Expansive knowledge with integrating IaaS, PaaS, and SaaS offerings into government cloud environments (e.g., AWS, AZURE & GCP). - Experience assessing STIGs, Cloud Compliance Guides, and System Mission Owner responsibilities within Government Cloud Environments. - Expert understanding of NIST 800 series guidelines, DoW 8500.01, DoW 8140.03, ISO 27001, COBIT, DoW RMF, OVL, and current cybersecurity best practices. - Excellent communication/presentation skills briefing senior military and government civilian leadership. - Experienced with writing policies, guides, procedures. - Experience in hands-on with eMASS, Xacta and/or other GRC tools. - Experience with Federal and FedRamp A&A Processes. - Experienced and comfortable advising at the Senior Executive Service (SES) level of customers. Requirements - Must have an active Top-Secret Clearance SCI eligible. - Bachelor’s degree in computer science/information technology, or other related degree fields (master’s degree is preferred or at least 10 years of related experience). - At least 10+ years of cybersecurity experience including a senior technical or management role; Project or Program Management experience a plus. - At least one IAT/IAM or equivalent security certifications (e.g., CISSP, CCSP, CISM, CISA, or CASP). Company Description We are proud to be an Affirmative Action and Equal Opportunity Employer and as such, we evaluate qualified candidates in full consideration without regard to race, color, religion, sex, sexual orientation, gender identity, marital status, national origin, age, disability status, protected veteran status, and any other protected status.

This description is a summary of our understanding of the job description. Click on 'Apply' button to find out more. Role Description Seeking an RMF Sr. Information Security Systems Manager (ISSM) and Subject Matter Expert to support mission critical Office of the Undersecretary of War for Research and Engineering (OUSW (R&E) capabilities within all facets of the RMF. This pioneering domain presents unique challenges, necessitating skilled ISSMs to maintain system security and oversee cyber implementation. The role demands accountability for upholding security standards across the organization, navigating the evolving landscape of defense technology and safeguarding sensitive information crucial to national security. To be successful in this position the candidate must possess a firm understanding of statutory guidance such as: - 570.01 (Information Assurance Workforce Improvement Program) - DoWI 8500.01 (Cybersecurity) - DoW Directive 8140.03 (Information Systems Security Manager – DoW Cyber Exchange) - NIST 800-37 r2 (Risk Management Framework for Information Systems and Organizations) Successful candidates should be able to: - Expertly Implement and Manage Cybersecurity Controls - Develop and implement security policies, procedures, and guidelines - Conduct risk assessments and identify potential vulnerabilities and threats - Collaborate with stakeholders to plan and implement security measures - Develop and implement incident response procedures - Ensure compliance with relevant security standards, regulations, and frameworks - Maintain accurate and up-to-date security documentation - Provide regular reports to management on the status of information security Qualifications - Must have an active Top Secret with SCI eligibility - Bachelor’s degree in computer science/information technology, or other related degree fields (master’s degree is preferred or at least 10 years of related experience) - At least 10+ years of cybersecurity experience including a senior technical or management role - Project or Program Management experience a plus - At least one IAT/IAM or equivalent security certifications (e.g., CISSP, CCSP, CISM, CISA, or CASP) - Experience working with OSD leadership or Military component or branch - Excellent communication/presentation skills briefing senior military and government civilian leadership - Experienced with writing policies, guides, procedures - Experience in hands on with eMASS, Xacta and/or other GRC tools - Experience with Federal and FedRamp A&A Processes - Experienced and comfortable advising at the Senior Executive Service (SES) level of customers Requirements - Utilize expert knowledge and experience regarding risk management strategies in support of a major DoW program - Collaborate between the Cyber Risk Assessor/Security Control Assessor and the program as well as DoW senior leadership - Reporting of status and metrics for body of evidence and authorization conditions - Manage multiple priorities in a high-paced and fast-changing environment - Perform other duties as assigned or required Benefits - Full-Time REMOTE position - Candidates in the Washington DC Metropolitan area preferred - Travel requirements will vary with location, expect approximately 10% to 25% Company Description We are proud to be an Affirmative Action and Equal Opportunity Employer and as such, we evaluate qualified candidates in full consideration without regard to race, color, religion, sex, sexual orientation, gender identity, marital status, national origin, age, disability status, protected veteran status, and any other protected status.

This description is a summary of our understanding of the job description. Click on 'Apply' button to find out more. Role Description Seeking an RMF Information Security Systems Manager (ISSM) and Subject Matter Expert to support mission critical CDAO capabilities within all facets of the RMF. This pioneering domain presents unique challenges, necessitating skilled ISSMs to maintain system security and oversee cyber implementation. The role demands accountability for upholding security standards across the organization, navigating the evolving landscape of defense technology and safeguarding sensitive information crucial to national security. - Collaborate between the Cyber Risk Assessor/Security Control Assessor and the program as well as DoD senior leadership. - Reporting of status and metrics for body of evidence and authorization conditions. - Develop and implement security policies, procedures, and guidelines to ensure compliance with applicable laws, regulations, and industry best practices. - Conduct risk assessments and identify potential vulnerabilities and threats to information systems. - Develop and implement risk mitigation strategies and controls to minimize the impact of security incidents. - Collaborate with system administrators, network administrators, and other stakeholders to plan and implement security measures for information systems, including establishing security controls and standards for information systems including Continuous Monitoring. - Develop and implement incident response procedures to reconstitute system operations to address security incidents and breaches. - Ensure compliance with relevant security standards, regulations, and frameworks. - Conduct periodic security audits and assessments to evaluate the effectiveness of security controls and identify areas for improvement. - Maintain accurate and up-to-date security documentation, including security plans, risk assessments, and incident reports. - Provide regular reports to the Government customer on the status of information security and any identified risks or vulnerabilities. - Provide support regarding the DoD’s agile authorization. Experience with Operation Vulcan Logic (OVL) processes a plus. Qualifications - Must have an active Secret Clearance - Bachelor’s degree in computer science/information technology, or other related degree fields (Master’s Degree is preferred or at least 5 years of related experience) - At least 5+ years of cybersecurity experience including a senior technical or management role, Project or Program Management experience a plus. - At least one IAT/IAM or equivalent security certifications ex. CISSP, CCSP, CISM, CISA, or CASP - Excellent communication/presentation skills briefing senior military and government civilian leadership. - Experience in hands on with eMASS, Xacta and/or other GRC tools. - Experience with Federal and FedRamp A&A Processes. Requirements - Have a strong background in information security, risk management, and compliance. - Strong clients focus and commitment to continuous improvement, ability to proactively network and establish relationships. - Manage multiple priorities in a high-paced and fast-changing environment. - Perform other duties as assigned or required. Company Description Arlo Solutions (Arlo) is an information technology consulting services company that specializes in delivering technology solutions. Our reputation reflects the high quality of the talented Arlo Solutions team and the consultants working in partnership with our customers. Our mission is to understand and meet the needs of both our customers and consultants by delivering quality, value-added solutions. The Department of Defense’s (DoD) Chief Digital and Artificial Intelligence Office (CDAO) is at the forefront of supporting the DoD with the adoption of innovative technologies such as data, analytics, and artificial intelligence to help accelerate predictions, forecasts, and interpretations for both strategic and tactical decisions across the enterprise.

Company Summary Arlo Solutions (Arlo) is an information technology consulting services company that specializes in delivering technology solutions. Our reputation reflects the high quality of the talented Arlo Solutions team and the consultants working in partnership with our customers. Our mission is to understand and meet the needs of both our customers and consultants by delivering quality, value-added solutions. Our solutions are designed and managed to not only reduce costs, but to improve business processes, accelerate response time, improve services to end-users, and give our customers a competitive edge, now and into the future. Position Overview The Department of Defense’s (DoD) Chief Digital and Artificial Intelligence Office (CDAO) is at the forefront of supporting the DoD with the adoption of innovative technologies such as data, analytics, and artificial intelligence to help accelerate predictions, forecasts, and interpretations for both strategic and tactical decisions across the enterprise. These ground-breaking endeavors bring new challenges to the assessment of DoD IT systems that previously did not exist. The Security Control Assessor (SCA) plays a pivotal role in comprehensively understanding the cybersecurity posture of a given capability within CDAO. SCAs must go beyond a mere compliance focus on controls to articulate the inherent risks of systems. Success in this position requires expertise in statutory guidance such as the NIST 800 series, DoDI 8500.01, DoD 8140.03, ISO 27001, COBIT, DoD RMF, and Operation Vulcan Logic (OVL), along with current cybersecurity best practices The SCA provides authoritative risk determinations and recommendations critical for the Authorizing Official (AO) to grant an Authority to Operate (ATO). Their assessments integrate technical rigor with regulatory compliance, ensuring a robust security posture and informing strategic decision-making. Work Location Full time remote. Candidates in the Washington DC Metropolitan preferred. Travel requirements will vary with location, however, expect approximately 10% to 25%. Job Responsibilities - Provide the AO with an independent risk assessment of assigned systems and an authorization. - Advise Program Managers on AO determination utilizing OVL documentation. - Provide senior advisory support to CDAO AO regarding authorizations of CDAO capabilities. - Utilize expert knowledge and experience regarding risk management strategies in support of a major DoD program. - Providing support regarding the agile authorization and OVL processes. - Provide independent risk analysis and recommendation. - Collaborate between the AO and the program as well as Program leadership. - Identify the security baseline based on the mission and security impacts to the system. - Determine assessment criteria, develop, review, and create a plan to assess the security requirements. - Assess the security requirements in accordance with the assessment procedures defined in the Security Assessment Plan (SAP). - Prepare the Security Assessment Report (SAR). - Monitor POAM actions based on findings and reassess remediated risk(s) as appropriate. - Develop the Risk Recommendation and AO Determination Brief. - Develop a system-level continuous monitoring strategy. - Author and present briefs regarding status of authorizations to AO and other senior Government officials. - Provides security architecture and DoD compliance advisory support. Success Factors - Have a strong background in risk management, and governance, risk and compliance (GRC). - Strong clients focus and commitment to continuous improvement, ability to proactively network and establish relationships. - Manage multiple priorities in a high-paced and fast-changing environment. - Perform other duties as assigned or required. Education and Minimum Qualifications - Must have at least a Public Trust – Secret level clearance preferred. - Bachelor’s degree in computer science/information technology, or other related degree fields (master’s degree is preferred or at least 5 years of related experience) - At least 5+ years of cybersecurity experience including a senior technical or management role, Project or Program Management experience a plus. - At least one IAT/IAM or equivalent security certifications ex. Sec+, CISSP, CCSP, CISM, CISA, or CASP - Experience working with OSD leadership or Military component or branch. - Understanding of NIST 800 series guidelines, DoDI 8500.01, DoD 8140.03, rISO 27001, COBIT, DoD RMF, OVL, and current cybersecurity best practices. - Excellent communication/presentation skills briefing senior military and government civilian leadership. - Experienced with writing standard operating procedures. - Experience in hands on with eMASS, Xacta and/or other GRC tools. - Experience with Federal and FedRamp A&A Processes. AAP Statement We are proud to be an Affirmative Action and Equal Opportunity Employer and as such, we evaluate qualified candidates in full consideration without regard to race, color, religion, sex, sexual orientation, gender identity, marital status, national origin, age, disability status, protected veteran status, and any other protected status.