IT Subject Matter Expert (SME) - Senior / Security Control Assessment

ECS; Washington (District of Columbia); On-site; USD 120,000 - 155,000; Full time

Job summary

ECS is seeking a TS-cleared Senior IT Subject Matter Expert (SME) / Security Control Assessment to support a DOJ program in Washington, DC. Provide senior technical expertise to security control assessments, translating evidence into defensible risk and authorization support.

We seek candidates committed to high quality to provide innovative solutions. As an SME, you will evaluate architecture, control implementation, evidence quality, risks, findings and recommendations, supporting rigorous

Qualifications

• US citizenship with active Top Secret clearance.
• Master's degree or one of the listed certifications.
• Minimum of eight (8) years of relevant work experience.
• Must meet FBI TS/SCI, background, training, facility-access, and polygraph requirements.
• Knowledge of enterprise change management; experience with JIRA/change workflow; familiarity with NIST control-impact analysis and governance-board coordination; experience with emergency change and risk assessment.

Responsibilities

• Provide senior SME for security control assessments, evaluating architecture, control implementation, evidence quality, risks, findings, and recommendations.
• Support rigorous assessment reports, evidence traceability, remediation recommendations, and continuous improvement of SCA methods and tools.
• Translate complex technical evidence into defensible risk and authorization support for DOJ program.
• Coordinate with governance bodies and contribute to continuous process improvements in security control assessments.

Skills

US citizenship

Top Secret clearance

JIRA/change workflow

NIST control-impact analysis

Change management

Risk assessment

SCA/RMF

Security control assessments

Education

Master's degree in Computer Science / Computer Engineering or related degree

Certifications: CCISO, CISA, CISM, CISSP, CISSP-ISSEP, CySA+, GSLC, GSNA

Tools

JIRA

Job description

Job Description

ECS is seeking a TS-cleared Senior IT Subject Matter Expert (SME) / Security Control Assessment to support one of our mission critical programs for the Department of Justice in Washington, DC.

We offer the chance to support the world’s finest law enforcement organization and help the people that keep us safe. In this job you will Provide senior technical expertise to OCIO security control assessments, translating complex technical evidence into defensible risk and authorization support.

We are seeking candidates committed to high quality to provide innovative solutions. As an Senior IT Subject Matter Expert / Security Control Assessment, you will provide senior subject-matter expertise for assessment activities, evaluating architecture, control implementation, evidence quality, risks, findings, and recommendations. Supports technically rigorous assessment reports, evidence traceability, remediation recommendations, and continuous improvement of SCA methods and tools.

Required Skills

• US citizenship with active Top Secret clearance
• Education/Certification requirements:
  • Master's degree in Computer Science, Computer Engineering, or related degree.
  • OR one of the following certifications: CCISO, CISA, CISM, CISSP, CISSP-ISSEP, CySA+, GSLC, GSNA
• Minimum of eight (8) years of relevant work experience
• Must meet applicable FBI TS/SCI, background, training, facility-access, and polygraph requirements.
• Demonstrated knowledge of enterprise change management
• Demonstrated experience with JIRA/change workflow
• Familiarity with NIST control-impact analysis and governance-board coordination
• Demonstrated experience with emergency change and risk assessment
• Demonstrated ability to apply comprehensive change management knowledge across key tasks and high impact assignments

  Desired Skills

  • Demonstrated deep domain knowledge and experience with SCA/RMF
  • Demonstrated experience with NIST SP 800-53/800-53A
  • Familiarity with enterprise architecture
  • Possess strong technical writing and risk analysis
  • Demonstrated experience with FBI/DOJ cybersecurity processes
  • Demonstrated ability to mentoring assessors.