Cybersecurity Assessment & Authorization SME

Jobtailor; Deutschland; Vor Ort; EUR 90.000 - 130.000; Vollzeit

Zusammenfassung

Jobtailor is seeking a cybersecurity Subject Matter Expert for RMF/A&A activities related to information systems in a DoD environment. The candidate will apply NIST SP 800-53 controls within RMF workflows for complex organizations and support authorization decisions.

Required are five years of RMF/A&A experience and DoD cybersecurity background. The role involves risk assessment, control implementation review, and presenting updates to senior management.

Qualifikationen

• Five years of RMF and NIST A&A experience.
• DOD cybersecurity experience required.
• Experience in assessing security controls and authorization reviews for large, complex organizations.
• Knowledge of emerging tech cybersecurity areas such as Cloud and ICS/OT is a plus.

Aufgaben

• acts as a cybersecurity SME for A&A of information systems.
• performs RMF/A&A processes for information systems undergoing authorization.
• explains how NIST 800-53 controls apply to RMF activities for large orgs.
• determines vulnerability severity and potential impact on authorization.
• briefs senior management on RMF progress or results.

Kenntnisse

RMF experience

NIST A&A

DOD cybersecurity

Security controls assessment

Jobbeschreibung

Responsibilities

• serves as a cybersecurity Subject Matter Expert (SME) with regards to Assessment and Authorization (A&A) of information systems and all associated cybersecurity policies and procedures.
• performs a DOD cybersecurity process while either authorizing an information system or serving as a SME for an information system undergoing authorization.
• possesses an understanding of how the security controls identified in the NIST 800-53 apply to the process of assessing and authorizing a large organization’s IT infrastructure such as DLA’s.
• determines the applicable severity value for an identified vulnerability (e.g., non-compliant security control).
• determines the possible ramifications on the system’s current or future authorization.
• briefs senior management on the progress or results of an information system undergoing the Risk Management Framework (RMF) process.

Requirements

• Must be a U.S. Citizen.
• five (5) years of relevant Risk Management Framework (RMF) and NIST Assess & Analyze (A&A) experience.
• DoD cybersecurity experience.
• experience in assessing security controls and conducting authorization reviews for large, complex organizations.
• experience in the general tenets supporting the overall DoD implementation of its authorization process, to include supporting cybersecurity policy, procedures, and processes.
• knowledge in the cybersecurity of emerging technology areas such as Cloud and Industrial Control Systems (ICSs), warehouse execution systems and Operational Technology (OT) infrastructures.
• IT-II Non-Critical Sensitive security clearance or Tier 3 (T3) at time of proposal submission.