• Maintain various EPA System security and privacy control implementation deliverables based on a NIST 800-53 rev5 control framework. • Update, maintain, and drive security and privacy documentation designed to protect the cloud- and host-based systems from both internal and external threats. • Review identified cyber security vulnerabilities and assist with the recommendation, documentation, and implementation of appropriate mitigations or countermeasures. • Conduct and support periodic reviews of the information system to ensure compliance with the security and privacy authorization package. • Review, create, and enhance security and privacy documentation to ensure continued compliance with security and privacy requirements. • Coordinate the response to the annual continuous monitoring assessment audit. • Ensure audit evidence are collected, reviewed, and documented, including any risk determinations and plans of actions and milestones. • Identify and notify the program manager when changes occur that might affect the authorization determination for the information system. • Provide analysis of systems, hardware, software, and maintenance needs. • Create and review annually the security- and privacy-related documentation. • Develop, coordinate, and conduct training and tabletop exercises related to continuity of operations, contingency planning, incident handling, awareness, etc. • Update control implementation tools like XACTA to maintain compliance against NIST 800-53 rev 5.