Cybersecurity Assessment and Authorization Subject Matter Expert (SME)

Diné Development Corporation

3d•Onsite

About The Position

Serves as a Cybersecurity Subject Matter Expert (SME) with regards to Assessment and Authorization (A&A) of information systems and all associated cybersecurity policies and procedures. Position is contingent upon contract award. Executes DoW/DLA cybersecurity processes to authorize information systems, maintain authorization of information systems, or serves as a Subject Matter Expert (SME) for systems undergoing the authorization process. Determines the residual risk of an identified vulnerability (e.g., non-compliant security control) and determines the possible ramifications on the system’s current or future authorization. Briefs senior management on the progress or results of an information system undergoing the Risk Management Framework (RMF) process. Thinks independently and demonstrates exceptional written and oral communications skills. Applies advanced technical principles, theories, and concepts. Contributes to the development of new principles, concepts, and methodologies. Works on unusually complex technical problems and provides highly innovative and ingenious solutions.

Requirements

Five (5) years of relevant C&A experience
Risk Management Framework (RMF) and NIST C&A experience
DOD cybersecurity experience
Experience in assessing security controls and conducting authorization reviews for large, complex organizations
Secret Clearance (Must possess a Moderate Risk, Non-Critical Sensitive, Tier 3 (T3)/NACLC/ANACI)
ICS300 or relevant Operational Technology “OT” or Industrial Control System “ICS” Cybersecurity Certifications
DOD 8570 – IAM Level III

Responsibilities

Executes DoW/DLA cybersecurity processes to authorize information systems, maintain authorization of information systems, or serves as a Subject Matter Expert (SME) for systems undergoing the authorization process.
Determines the residual risk of an identified vulnerability (e.g., non-compliant security control) and determines the possible ramifications on the system’s current or future authorization.
Briefs senior management on the progress or results of an information system undergoing the Risk Management Framework (RMF) process.
Applies advanced technical principles, theories, and concepts.
Contributes to the development of new principles, concepts, and methodologies.
Works on unusually complex technical problems and provides highly innovative and ingenious solutions.
Demonstrated expertise in leading and mentoring teams, providing clear guidance, quality oversight, and technical direction to ensure all cybersecurity artifacts meet DoD standards, organizational expectations, and inspection‑ready quality levels.
SME level experience in assessing security controls and conducting authorization reviews for large, complex organizations.