Senior Federal Cybersecurity Controls SME (NIST RMF)

Kaizen Lab Inc.

Charlotte (NC)

On-site

USD 120,000 - 180,000

Full time

14 days+

Application generator

Stand out for this role — generate a tailored resume and cover letter in about a minute.

Get past ATS filters

Job summary

Kaizen Lab Inc. is seeking an SME Cybersecurity Consultant to lead and guide control testing efforts for federal and critical industry clients.

The role requires 10+ years in cybersecurity with deep expertise in NIST 800-53 v5, NIST 800-37, and FISMA, and the ability to deliver SSPs, SARs, and POA&Ms. You will collaborate with IT, security, and audit teams, providing mentorship to assessment staff and supporting RMF-based authorization processes.

Qualifications

In-depth knowledge of federal control testing and RMF-based assessments.
],
job_responsibilities_description:[“Lead and perform comprehensive cybersecurity control assessments in accordance with NIST 800-53 v5, NIST 800-37, and FISMA requirements.”,
Serve as the SME for control testing methodologies and mentor assessment teams.
Review and validate control implementation and effectiveness, ensuring compliance with federal regulations and organizational policies.
Develop and deliver SSPs, SARs, and POA&Ms.
Analyze security documentation and evidence for compliance with security and privacy controls.
Collaborate with IT, security, and audit teams to identify and mitigate risks.
Provide RMF process expertise to support system authorization and accreditation.
Assist in audits and regulatory inspections; stay current with regulatory changes.
Communicate findings to technical and non-technical stakeholders including senior leadership.

Responsibilities

Lead and perform comprehensive cybersecurity control assessments in accordance with NIST 800-53 v5, NIST 800-37, and FISMA requirements.
Serve as the subject matter expert (SME) for control testing methodologies, providing guidance and mentorship to assessment teams.
Review and validate control implementation and effectiveness, ensuring compliance with federal regulations and organizational policies.
Develop and deliver key artifacts, including SSPs, SARs, and POA&Ms.
Analyze security documentation, configurations, and evidence to assess compliance with security and privacy controls.
Collaborate with cross-functional teams, including IT, security, and audit teams, to identify, document, and mitigate risks.
Provide technical expertise in the implementation of the RMF process, supporting system authorization and accreditation.
Assist in the preparation for audits, inspections, and other regulatory assessments, ensuring successful outcomes.
Stay informed about evolving federal cybersecurity regulations, standards, and threats to provide proactive recommendations.
Communicate assessment findings and recommendations effectively to both technical and non-technical stakeholders, including senior leadership and government clients.