Cybersecurity Assessment And Authorization Subject Matter Expert (SME)

vivsofttechnologiesfa; United States; Remote; USD 120,000 - 170,000; Full time

Job summary

VivSoft seeks a Cybersecurity Assessment And Authorization SME to support A&A of information systems. This role focuses on RMF and NIST-based controls across diverse environments, including cloud and on-premises.

The ideal candidate has DoD or federal experience, 5+ years in C&A, and can brief leadership on security posture and RMF outcomes.

Qualifications

• Minimum 5 years of Certification & Accreditation (C&A) experience with RMF/NIST-based processes.
• DoD or federal government cybersecurity experience required.
• Experience assessing security controls and conducting authorization reviews for large, complex organizations.

Responsibilities

• Execute cybersecurity processes to authorize information systems and maintain existing system authorizations.
• Serve as SME support for systems undergoing the authorization process.
• Apply NIST 800-53 security controls to assessment and authorization of large, complex IT infrastructures.
• Determine residual risk and assess impact on RMF-based authorizations.
• Brief senior leadership on RMF status and outcomes.

Skills

C&ARMF experience

NIST RMF

DoD/government cybersecurity

Job description

Job Title: Cybersecurity Assessment And Authorization Subject Matter Expert (SME)

Location: Remote, USA

Clearance Required: Secret Clearance

Position Type: Full-Time

About the company:

At VivSoft, we aim to solve complex federal problems using emerging and open technologies in a collaborative and rewarding environment. VivSoft is a diverse team of strategists, engineers, designers, and creators experienced in building high-performance, effective software, with a focus on impactful organisational design and software delivery dynamics. We build secure Software Factories based on DoD reference designs and NIST Frameworks for Cloud and DevSecOps. These factories deliver AI/ML Applications, Data Science Platforms, Blockchain and Microservices for DoD, Healthcare and Civilian Agencies

Job Summary:

We are seeking a Cybersecurity Subject Matter Expert (SME) to support Assessment and Authorization (A&A) of information systems and associated cybersecurity policies and procedures.

Key Responsibilities:

• Execute cybersecurity processes to authorize information systems and maintain existing system authorizations
• Serve as SME support for systems undergoing the authorization process
• Apply NIST 800-53 security controls to the assessment and authorization of large, complex IT infrastructures, including large and small enclaves, cloud-hosted services, operational technology, AIS applications, and outsourced IT processes
• Determine residual risk associated with identified vulnerabilities (e.g., non-compliant security controls) and assess potential impact on current or future system authorization
• Brief senior leadership on the status and outcomes of systems undergoing the Risk Management Framework (RMF) process

Skills Required:

• Minimum 5 years of relevant Certification & Accreditation (C&A) experience, including Risk Management Framework (RMF) and NIST-based C&A processes
• DoD or federal government cybersecurity experience required
• Experience assessing security controls and conducting authorization reviews for large, complex organizations

Benefits:

• Comprehensive Medical, Dental, and Vision Plans (Healthcare benefits are 100% employer-paid for employees only)
• Life Insurance
• Paid Time Off (Flexible/Combined PTO, Bereavement Leave, 11 Company Paid Holidays)
• 401K Retirement Plan with employer match
• Professional Development Training Reimbursement.