Delegated Authorizing Official 3

Required Clearance: TS/SCI w/ Full-Scope Poly Clearance

Delegated Authorizing Official Representative Skill Level 3
 Responsible for assisting in identifying the overall security requirements for the protection of data, to
ensure the implementation of appropriate information security controls, and perform and analyze the
security risk assessment, risk analysis, risk management process, security control assessments, and
awareness activities for systems and networking operations.
 Provide assistance to ensure Cybersecurity functions are included in the configuration
management process.
 Interact with customers, Information Technology (IT) staff, and high-level corporate officers in
defining and achieving required Cybersecurity objectives for the organization.
 Contribute to building security architecture.
 Assist with the integration of legacy systems. Contribute to the acquisition/RDT&E environment and
building Cybersecurity into systems deployed in operational environments.
 Prepare security authorization documentation.
The Level 3 Delegated Authorizing Official Representative shall possess the following capabilities:
 Analyze Cybersecurity built into systems to be deployed to operational environments
 Prepare risk assessment, plan of actions, authorization recommendations, and related security
authorization documentation
 Identify and support overall security requirements for the protection of data to ensure the
implementation of information security policies, activities, and controls
 Ensure Cybersecurity functions are included in the development and risk management process,
particularly those focusing on infrastructure protection and defensive IT strategy
 Facilitate interaction with customers, IT staff, and high-level corporate officers to assist in defining
and achieving required risk management objectives for the organization
 Support integration of legacy systems within respective IT environment.
Qualifications:
 Eight (8) years of experience as an IT Risk Assessor, System Security Engineer, Information
Systems Security Manager or DAO in programs and contracts of similar scope, type and complexity
is required.
 Bachelor's Degree in Computer Science or IT Engineering. In lieu of a Bachelor's degree, an
additional four (4) years of experience for a total of twelve (12) years.
 Working knowledge of the following is required: system security design process, defense-in­
depth/breadth, engineering life cycle, information domains, cross-domain solutions, controlled
interfaces, identification, authentication and authorization, system integration, ICD 503 (formerly
NISCAP), risk management, intrusion detection, contingency planning, incident handling,
configuration control, change management, auditing, security authorization process, principles of
Cybersecurity (confidentiality, integrity, non-repudiation, availability, access control), and security
testing
 This is an CWIP Billet per DOD Directive 8570-1 and must meet specified certification requirements
defined and documented by the TIO COR. An IAM 3 certification is required.