IT Subject Matter Expert (SME) - Senior / Security Control Assessment

ECS; Washington (District of Columbia); On-site; USD 150,000 - 190,000; Full time

Job summary

ECS is seeking a TS-cleared Senior IT Subject Matter Expert (SME) / Security Control Assessment to support a DOJ program in Washington, DC. You will provide senior technical expertise to OCIO security control assessments, translating complex evidence into defensible risk and authorization support.

You will evaluate architecture, control implementation, evidence quality, risks, findings, and recommendations, supporting rigorous assessment reports, evidence traceability, remediation, and

Qualifications

• US citizenship with active Top Secret clearance.
• Master's degree or equivalent; or one of the listed certifications.
• Eight years of relevant work experience.
• Must meet FBI TS/SCI, background, training, facility-access, and polygraph requirements.
• Experience with enterprise change management and evidence traceability.
• Familiarity with change workflows and governance-board coordination.
• Ability to apply comprehensive change management across high impact tasks.

Responsibilities

• Provide senior technical expertise to OCIO security control assessments and translate evidence into defensible risk posts.
• Evaluate architecture, control implementation, evidence quality, risks, findings and recommendations.
• Support rigorous assessment reports, traceability of evidence, remediation recommendations, and continuous improvement of SCA methods and tools.
• Mentor assessors and contribute to DOJ cybersecurity process improvements.

Skills

SCA/RMF

NIST 800-53

Enterprise architecture

Technical writing

Risk analysis

FBI/DOJ processes

Mentor assessors

Education

Master's degree in CS/CE or related

Certifications: CCISO, CISA, CISM, CISSP, CISSP-ISSEP, CySA+, GSLC, GSNA

Tools

JIRA

Job description

ECS is seeking a TS-cleared Senior IT Subject Matter Expert (SME) / Security Control Assessment to support one of our mission critical programs for the Department of Justice in Washington, DC.

We offer the chance to support the world’s finest law enforcement organization and help the people that keep us safe. In this job you will Provide senior technical expertise to OCIO security control assessments, translating complex technical evidence into defensible risk and authorization support.

We are seeking candidates committed to high quality to provide innovative solutions. As an Senior IT Subject Matter Expert / Security Control Assessment, you will provide senior subject-matter expertise for assessment activities, evaluating architecture, control implementation, evidence quality, risks, findings, and recommendations. Supports technically rigorous assessment reports, evidence traceability, remediation recommendations, and continuous improvement of SCA methods and tools.

Qualifications

• US citizenship with active Top Secret clearance
• Education/Certification requirements:
  • Master's degree in Computer Science, Computer Engineering, or related degree.
  • OR one of the following certifications: CCISO, CISA, CISM, CISSP, CISSP-ISSEP, CySA+, GSLC, GSNA
• Minimum of eight (8) years of relevant work experience
• Must meet applicable FBI TS/SCI, background, training, facility-access, and polygraph requirements.
• Demonstrated knowledge of enterprise change management
• Demonstrated experience with JIRA/change workflow
• Familiarity with NIST control-impact analysis and governance-board coordination
• Demonstrated experience with emergency change and risk assessment
• Demonstrated ability to apply comprehensive change management knowledge across key tasks and high impact assignments

Desired Skills

• Demonstrated deep domain knowledge and experience with SCA/RMF
• Demonstrated experience with NIST SP 800-53/800-53A
• Familiarity with enterprise architecture
• Possess strong technical writing and risk analysis
• Demonstrated experience with FBI/DOJ cybersecurity processes
• Demonstrated ability to mentoring assessors.