Senior Archer GRC Administrator

Tharros supports the Department of Homeland Security (DHS) with cybersecurity services across its Intelligence Enterprise.

In support of this mission, we have an immediate opportunity for a Senior Archer GRC Administrator. In this role you will configure, operate, and maintain the RSA Archer governance, risk, and compliance (GRC) platform that supports DHS security authorization and risk management. You will own the platform from server and database through the security controls catalog, workflows, and leadership dashboards, and train users across the enterprise. This position is on-site in a Government SCIF in Washington, DC.

Duties include but not limited to:

• Configure, operate, and maintain the Archer GRC software toolset.
• Install vendor patches; test and install updated versions of the GRC software.
• Maintain the GRC server platform and manage the GRC database.
• Configure, populate, and maintain the Security Controls Catalog (DHS 4300C, NIST SP 800-53, CNSSI 1253, IC overlays).
• Tailor the tool for new use cases as requested by the Government.
• Develop compliance dashboards for CSD leadership and system owners.
• Set up and manage user accounts; train Government and contractor users within 3 business days of request.
• Develop and maintain GRC SOPs and training documentation.

• BS degree in Information Technology, Cybersecurity, Information Systems, or Computer Science OR minimum of 10 years' experience in IT or cybersecurity.
• Minimum of 7 years' IT or cybersecurity experience, including hands-on RSA Archer administration.
• Active TS/SCI clearance and U.S. citizenship; willingness to undergo a DHS counterintelligence-scope polygraph.
• Knowledge of RSA Archer architecture, application builder, workflow, data feeds, and reporting.
• Knowledge of NIST SP 800-53 and CNSSI 1253 security control structures.
• Knowledge of the Risk Management Framework (RMF) authorization workflow.
• Skill in configuring GRC applications, workflows, and dashboards.
• Skill in patching and upgrading enterprise applications.
• Ability to train users of varying technical backgrounds.
• Proficient in Microsoft Office Suite to include Teams or similar workplace chat and videoconferencing tools.
• Excellent written and oral communications skills.

Desired

• RSA Archer Certified Administrator or another professional GRC certification.
• SQL Server administration experience.