Demonstrated experience managing POA&Ms from identification through closure, including documenting findings and risks, developing and tracking remediation milestones, coordinating corrective actions with system administrators, Information Systems Security Engineers (ISSEs), engineers, and developers, validating closure evidence, monitoring due dates, and escalating overdue or unresolved findings. Demonstrated proficiency using Xacta to manage assigned systems' RMF activities, including documenting and updating security control implementation and assessment status, maintaining assessment evidence, identifying and tracking noncompliant and non validated controls, managing POA&Ms, maintaining authorization status, and generating reports.