Cybersecurity Assessment & Authorization SME
About The Position
Connected Logistics is seeking a Cybersecurity Assessment & Authorization SME to assist in managing the implementation, maintenance, and monitoring of cybersecurity in support of J6 Program Executive Officer's Portfolio of IT capabilities, associated Program Management Offices, IT infrastructure support, and Operational Technology areas for Information Systems/Programs throughout the entirety of its system development life cycle. The Cybersecurity Assessment & Authorization SME serves as a cybersecurity Subject Matter Expert (SME) with regards to Assessment and Authorization (A&A) of information systems and all associated cybersecurity policies and procedures.
Requirements
- Must be a U.S. Citizen.
- Five (5) years of relevant C&A experience; Risk Management Framework (RMF) and NIST C&A experience; DOD cybersecurity experience.
- Experience in assessing security controls and conducting authorization reviews for large, complex organizations.
- DoD Approved 8570 Baseline Certification: Category IAM Level III (CISSP, CISM, GSLCGSLC, or CCISO)
- Must possess IT-II Non-Critical Sensitive/ Secret security clearance (T3) at time of proposal submission.
Nice To Haves
- Possess excellent analytical and writing skills.
- Possess Microsoft Office programs (Excel, Word, PowerPoint, MS Project, etc.) knowledge.
- Possess experience working with DoD/DLA.
Responsibilities
- Executes DoW/DLA cybersecurity processes to authorize information systems, maintain authorization of information systems, or serves as a Subject Matter Expert (SME) for systems undergoing the authorization process.
- Possesses an understanding of how security controls identified in the NIST 800-53 apply to the process of assessing and authorizing a large organization’s IT infrastructure such as DLA, in which there is a compilation of large and small enclaves, Cloud Hosted Services, Operational Technology, AIS applications and outsourced IT processes.
- Determines the residual risk of an identified vulnerability (e.g., non-compliant security control) and determines the possible ramifications on the system’s current or future authorization.
- Briefs senior management on the progress or results of an information system undergoing the Risk Management Framework (RMF) process.
Benefits
- health, dental, vision, life, and disability insurance
- a great 401(k) package
- generous Paid Time Off
- ongoing professional development
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
Education Level
No Education Listed
