(C) Subject Matter Expert – Program Protection/Cybersecurity

THE MCHENRY MANAGEMENT GROUP, LLC•Washington, DC

About The Position

The Program Protection/Cybersecurity Subject Matter Expert will provide support to the Director of Systems Integration and Chief Acquisition Officer for investment decisions and major systems acquisition program management processes and procedures. CG-SID-9 provides support and oversight to the Program Management Offices of major and non-major systems acquisitions and is the primary point of contact with the Department of Homeland Security (DHS) for the acquisition review process. Due to the size, scope and complexity of USCG acquisition programs, CG-SID-9 requires specialized program management support.

Requirements

Cybersecurity & Program Protection Expertise
Risk Management & Threat Assessment
Security Architecture & Design
Compliance & Accreditation
Program Protection Planning
Stakeholder Engagement
Incident Response & Continuous Monitoring
Bachelor’s degree in Cybersecurity, Information Assurance, Computer Science, or related field; Master’s degree preferred.
Minimum 8–10 years of experience in cybersecurity and program protection for complex systems.
Experience with federal acquisition programs and DoD/DHS security requirements.
Minimum 5 years of experience on ACAT 1 acquisitions programs as defined by the Major Systems Acquisition Manual (MSAM)
Expertise in NIST RMF, FISMA, and related cybersecurity frameworks.
Strong knowledge of encryption, secure communications, and vulnerability management.
Excellent analytical, problem-solving, and communication skills.
CISSP, CISM, or equivalent required
Ability to work collaboratively with multidisciplinary teams.
Strong documentation and presentation capabilities.

Nice To Haves

PMP or INCOSE CSEP a plus.

Responsibilities

Advise on cybersecurity strategies, policies, and best practices to safeguard systems and data.
Ensure compliance with federal cybersecurity standards (e.g., NIST SP 800 series, RMF, FISMA).
Conduct risk assessments and vulnerability analyses for systems and programs.
Identify potential threats and develop mitigation strategies to protect critical assets.
Support development and review of secure system architectures and designs.
Ensure integration of cybersecurity requirements throughout the system lifecycle.
Assist with security authorization and accreditation processes under RMF.
Prepare documentation for compliance audits and certification activities.
Develop and maintain Program Protection Plans (PPP) and related security documentation.
Ensure protection of critical technologies, intellectual property, and sensitive information.
Provide expert input during technical reviews, briefings, and working groups.
Communicate cybersecurity requirements and risks to stakeholders effectively.
Support incident response planning and execution.
Recommend tools and processes for continuous monitoring and threat detection.