CYBERSECURITY ASSESSMENT AND AUTHORIZATION SUBJECT MATTER EXPERT (SME)

Y-Tech, LLC.; Mobile (AL); On-site; USD 90,000 - 130,000; Full time

Job summary

Y-Tech, LLC. is seeking a cybersecurity Subject Matter Expert (SME) to lead A&A activities under RMF for DoD-related information systems. The role requires deep knowledge of NIST 800-53 controls and DoD ecosystem to assess and authorize IT/OT infrastructures.

The candidate will brief senior management on RMF progress and maintain ongoing authorization status across enclaves, cloud services, and outsourced IT processes.

Qualifications

• 5+ years of A&A experience including RMF and NIST C&A.
• Experience assessing security controls for large, complex organizations.
• Must hold Secret clearance and 8570 IAM Level III certification.
• Ability to brief senior management on RMF progress and results.

Responsibilities

• Serve as cybersecurity SME for Assessment and Authorization (A&A) of information systems.
• Execute RMF/NIST 800-53 aligned processes to authorize and maintain authorization of information systems.
• Assess residual risk of identified vulnerabilities and advise on implications for authorization.

Skills

A&A experience

RMF

NIST C&A

DoD cybersecurity

Security control assessment

Senior briefing

Education

8570 IAM Level III

Job description

Serves as a cybersecurity Subject Matter Expert (SME) with regards to Assessment and Authorization (A&A) of information systems and all associated IT/OT cybersecurity policies and procedures. Executes DoW/DLA cybersecurity processes to authorize information systems, maintain authorization of information systems, or serves as a Subject Matter Expert (SME) for systems undergoing the authorization process. Possess an understanding of how security controls identified in the NIST 800-53 apply to the process of assessing and authorizing a large organization's IT infrastructure such as DLA, in which there is a compilation of large and small enclaves, Cloud Hosted Services, Operational Technology, AIS applications and outsourced IT processes. Determines the residual risk of an identified vulnerability (e.g., non-compliant security control) and determines the possible ramifications on the system's current or future authorization. Briefs senior management on the progress or results of an information system undergoing the Risk Management Framework (RMF) process. Requirements:

• Experience: Five (5) years of relevant A&A experience; Risk Management Framework (RMF) and NIST C&A experience; DOD cybersecurity experience
• Experience in assessing security controls and conducting authorization reviews for large, complex organizations
• Investigative Requirement: Must possess a Moderate Risk, Non-Critical Sensitive, Tier 3 (T3)/NACLC/ANACI at the time of proposal submission.
• Clearence: Secret
• 8570/8140: DoD Approved 8570 Baseline Certification: Category IAM Level III