Cybersecurity Risk Management SME

Castalia Systems; Waipahu (HI); On-site; USD 145,000 - 150,000; Full time

Benefits offered by this job

Medical coverage

Dental coverage

Vision coverage

401k matching

PTO

Paid holidays

Training opportunities

Pet insurance

Job summary

Castalia Systems is seeking a Cybersecurity Risk Management Subject Matter Expert to support A&A processes under RMF policy DoDI 8510.01. This role provides expert guidance in system risk mitigation, advises the J683, and manages authorizations within the USINDOPACOM AO's DoDIN AO.

The ideal candidate will facilitate AO Authorizations, contribute security categorization, control selection, and compliance assessments, leveraging DoD experience and advanced RMF certifications.

Qualifications

• Must have 5+ years RMF A&A experience with DoD systems.
• Experience validating Cybersecurity controls per RMF A&A processes.
• Proficiency with automated CA/A&A toolsets such as eMASS.

Responsibilities

• Notify system owners and the J683 of authorization expirations.
• Assess and validate Cybersecurity Controls per RMF procedures.
• Assist in updating Security Authorization Package (SAP) documentation.
• Provide completed SAP for AO-DR review.
• Update authorization status and artifacts in system databases.
• Report performance objectives and deliverables to the J683.

Skills

RMF knowledge

A&A experience

Security assessment

J683 liaison

MS Office tools

Education

5+ years RMF A&A experience

IAM-III Certification

Advanced DoD certification compliance

High School Diploma

Tools

eMASS

Security assessment tools

Job description

Career Opportunities with Castalia Systems

A great place to work.

Current job opportunities are posted here as they become available.

Benefits

Medical, dental, and vision coverage, 401k matching, generous PTO, paid holidays, professional training opportunities, and even pet insurance to ensure your furry friends are cared for too.

Job Summary

A Cybersecurity Risk Management Subject Matter Expert is responsible for supporting the Assessment and Authorization (A&A) processes in compliance with the Risk Management Framework (RMF) policy DoDI 8510.01. This role involves providing expert guidance in system risk mitigation, advising the J683, and managing authorizations within the USINDOPACOM AO's DoDIN Area of Responsibility (DAO). The specialist will facilitate various AO Authorizations and offer Subject Matter Expertise in security categorization, security control selection, and compliance assessments.

Roles and Responsibilities

A qualified candidate will perform the following duties and responsibilities, but are not limited to:

• Notify system owners and the J683 of system authorization expirations.
• Assess and validate Cybersecurity Controls in accordance with USINDOPACOM procedures.
• Assist in updating systems security documentation for the Security Authorization Package (SAP).
• Provide completed SAP for AO-DR review.
• Update systems databases with Authorization status and artifacts.
• Report performance objectives and deliverables to the J683.

Knowledge and Skills

• Must have experience in the validation of Cybersecurity controls for the A&A of systems within the DoD.
• Must have experience with all phases of A&A in the RMF process.
• Must have experience with automated C&A and A&A toolsets (e.g. Enterprise Mission Assurance Support Service (eMASS).
• Must be able to integrate automated toolset results with security assessment submissions (i.e. Security Assessment Plans, Security Assessment, Risk Assessment Reports, etc.).
• Experience using Microsoft Office tools (Project, Word, PowerPoint, Excel, Visio and Outlook).
• Experience with contract financial management.

Education

• Minimum High School Diploma.
• Must have at least 5 years’ experience with managing, developing, or preparing RMF the A&A of systems within the DoD.
• IAW DoDM 8140.03, must meet the advanced personnel certification.
• IAM-III Certification (CISM, CISSP or Associate, GSLC, CCISO)

Physical Requirements/Work Environment

• Typical office environment.

Travel

• Not required.

Company Description

Castalia Systems is a proven business partner providing mission-critical solutions to the Federal Government. We provide cutting-edge solutions from Securing and Managing Data to Systems Engineering and Development. Castalia Systems is a pioneer in Artificial Intelligence Design and Application.

With our vast knowledge of our customers' needs and relevant technology, our team is able to bring successful solutions to every mission. We are one-upping our competitors by providing premium IT solutions and platforms with cutting-edge technology so it’s so evident when you compare us with anyone.

Compensation

At Castalia Systems, we provide you with opportunities and choices and support your total well-being. Our benefits include: Medical, dental, vision coverage, 401k matching, generous PTO, paid holidays, professional training opportunities, and even pet insurance to ensure your furry friends are cared for too. All regularly scheduled employees working at least 30 hours per week are eligible to participate in Castalia Systems’ benefit programs. Individuals that do not meet the threshold are only eligible for select offerings, not inclusive of health benefits.

Salary at Castalia Systems is determined by various factors, including but not limited to location, position knowledge, skills, competencies, and experience, as well as contract-specific affordability and organizational requirements. The projected compensation range for this position is $145,000.00 to $150,000.00 (annualized USD). The estimate displayed represents the typical salary range for this position and is just one component of Castalia Systems’ total compensation package for employees.

Disclaimer

Castalia Systems is an equal employment opportunity and affirmative action employer and strives to comply with all applicable laws prohibiting discrimination based on race, color, creed, sex, sexual orientation, age, national origin, or ancestry, physical or mental disability, veteran status, marital status, HIV-positive status, as well as any other category protected by federal, state, or local laws. All such discrimination is unlawful, and all persons involved in the operations of the company are prohibited from engaging in this type of conduct.