Cybersecurity Risk Management Subject Matter Expert - Active TS/SCI Clearance Required

Akima, LLC•Camp H M Smith, Hawaii

20h•Onsite

About The Position

Akima Systems Engineering is looking for a Cybersecurity Risk Management Subject Matter Expert (SME) to work in Honolulu, HI. The candidate plays a pivotal role in safeguarding our national security by providing comprehensive support throughout all phases of the Assessment and Authorization (A&A) processes as defined by the Risk Management Framework (RMF) policy DoDI 8510.01. The SME offers deep expertise in system risk mitigation and makes strategic recommendations to the J6 during the security lifecycle of all Authorizations under the USINDOPACOM Approving Official’s (AO) DoDIN Area of Responsibility (DAO).

Requirements

Active TS clearance and SCI eligible.
IAW DoDM 8140.03, must meet the advanced personnel certification.
Must possess ONE of the following 8570 IAM-III certifications: CISM, CISSP (or Associate), GSLC, CCISO.
Minimum High School Diploma/GED.
Must have at least 5 years’ experience with managing, developing, or preparing RMF the A&A of systems within the DoD.
Must have experience in the validation of Cybersecurity controls for the A&A of systems within the DoD.
Must have experience with all phases of A& A in the RMF process.
Must have experience with automated C&A and A&A toolsets (e.g. Enterprise Mission Assurance Support Service (eMASS)).
Must be able to integrate automated toolset results with security assessment submissions (i.e. Security Assessment Plans, Security Assessment, Risk Assessment Reports, etc.).
Experience using Microsoft Office tools (Project, Word, PowerPoint, Excel, Visio and Outlook).

Responsibilities

Manages and supports current and future authorizations, including Memorandums of Agreement (MOA), Memorandum of Understanding (MOU), Interconnection Security Agreements (ISA), Partner Nation Connections, and submissions to the Defense Security/Cybersecurity Authorization Working Group (DSAWG).
Assists with Authority to Connect (ATC) and Authority to Operation (ATO) requests.
Assists in security categorization, selection of security controls for various systems, and provide guidance to the RMF team lead.
Active involvement in the validation and compliance assessments of Cybersecurity controls for systems requesting authorization or reauthorization is crucial.
Coordinates with system owners, assessing and validating Cybersecurity controls, aiding System User Representatives (SURs) in updating security documentation, and ensuring the Authorization Official Designated Representative (AO-DR) receives completed Security Authorization Packages (SAP) for assessment.
Maintains and updates relevant systems databases and provide monthly status reports detailing performance, deliverables, and outstanding tasks.