Cybersecurity Assessment and Authorization SME

Responsibilities

• Serve as a Cybersecurity Assessment & Authorization (A&A) Subject Matter Expert supporting enterprise Risk Management Framework (RMF) activities
• Lead all phases of the RMF lifecycle including system categorization, security control selection, implementation, assessment, and authorization
• Develop and maintain RMF artifacts such as System Security Plans (SSPs), Security Assessment Plans (SAPs), and Plans of Action & Milestones (POA&Ms)
• Assess and validate security controls in accordance with DoDI 8510.01 and NIST SP 800-53
• Support implementation and validation of STIGs, SRGs, ACAS scans, and IAVA compliance
• Utilize eMASS to manage authorization packages and track security control implementation
• Coordinate remediation efforts with ISSMs, System Owners, and Government stakeholders
• Prepare executive-level briefings and technical reports regarding cybersecurity posture

Requirements

• Bachelor's degree in Cybersecurity, IT, Computer Science, or related technical discipline (or 4 years of additional related experience)
• Minimum of 5 years of experience in Cybersecurity Assessment & Authorization (A&A) or RMF within DoD or Federal environments
• Demonstrated experience applying DoD RMF in accordance with DoDI 8510.01 and NIST SP 800-53
• Must meet DoD 8140 IAM Level III workforce qualification requirements
• Must possess a Secret Security Clearance and ability to obtain IT-II Non-Critical Sensitive or Tier 3 clearance
• Experience with enterprise tools such as eMASS, ACAS, STIG Viewer, or SCAP Compliance Checker
• Experience supporting Cloud Hosted Services, OT, PIT, or FRCS environments

Preferred Qualifications

• Technical background directing IT operations and systems architecture
• Previous experience working with government agencies as a contractor