Cybersecurity Assessment & Authorization SME

Mission Multiplier•Huntsville, AL

8d•Remote

About The Position

Mission Multiplier is looking for a Cybersecurity Assessment & Authorization Subject Matter Expert (SME) to support one of our subcontracts. This can be off-site/remote.

Requirements

Minimum of five (5) years of relevant C&A experience, Risk Management Framework (RMF), NIST C&A experience, and DOD cybersecurity experience.
Experience in assessing security controls and conducting authorization reviews for large, complex organizations.
Must possess a Moderate Risk, Non-Critical Sensitive, Tier 3 (T3)/NACLC/ANACI.
CISM, CISSP, GSLC or equivalent DoD Approved 8570 Baseline Certification: Category IAM Level III
Currently possesses, or has the ability to obtain and maintain, a U.S. Secret clearance.
B.S. degree in IT or Cybersecurity or related field preferred.

Responsibilities

Serves as a cybersecurity Subject Matter Expert (SME) with regards to Assessment and Authorization (A&A) of information systems and all associated cybersecurity policies and procedures.
Executes DoW/DLA cybersecurity processes to authorize information systems, maintain authorization of information systems, or serves as a Subject Matter Expert (SME) for systems undergoing the authorization process.
Possess an understanding of how security controls identified in the NIST 800-53 apply to the process of assessing and authorizing a large organization's IT infrastructure such as DLA, in which there is a compilation of large and small enclaves, Cloud Hosted Services, Operational Technology, AIS applications and outsourced IT processes.
Determines the residual risk of an identified vulnerability (e.g., non-compliant security control) and determines the possible ramifications on the system's current or future authorization.
Briefs senior management on the progress or results of an information system undergoing the Risk Management Framework (RMF) process with regards to Assessment and Authorization.
Other duties as assigned.