Senior Security Risk Management SME*

SIERTEK LTD; Washington (District of Columbia); On-site; USD 140,000 - 200,000; Full time

Job summary

SierTeK Ltd. is seeking a Senior Security Risk Management Subject Matter Expert to support a Washington, DC opportunity. The role focuses on risk management operations, including A&A, continuous monitoring, and FISMA compliance for cloud and hybrid environments.

Ideal candidates have 10+ years of security-related experience, with 2+ years in A&A, FISMA, policy standards, and cloud security. Certifications such as CISM, CAP, or GRC are required or demonstrable equivalents.

Qualifications

• At least 10 years total related experience and must include at least 2 years in A&A, FISMA, IC cybersecurity policy and standards, continuous monitoring, Cross Domain Solutions, and secure cloud/hybrid engineering.
• Required: CISM, CAP, or GRC Certification, or comparable demonstrable experience; Desired: AWS, Azure, and Microsoft 365 cloud platforms.

Responsibilities

• Drive complex security risk management operations, including Assessment and Authorization (A&A) and continuous monitoring.
• Apply NIST 800-series and CNSSI 1253 security controls to secure cloud and hybrid environments.
• Support FISMA compliance for the agency and implement emerging risk management practices.

Skills

Security risk management

A&A

FISMA compliance

CNSSI 1253

Continuous monitoring

Cloud security

Education

CISM CAP GRC certification

10+ years related experience

Job description

SierTeK proudly serves our clients by providing expertise in the Program Management, Information Technology, and Administrative Support domains. Founded in 2007 as a minority and service-disabled veteran-owned company, we serve as prime- and subcontractor for a multitude of Federal Department of Defense contracts. By focusing on continual improvement, our services remain at the forefront of our industry, and we pride ourselves on delivering our services with the highest degree of integrity.

SierTeK Ltd. is seeking a Senior Security Risk Management SME to support an opportunity in Washington D.C..

Position Overview Section

The Senior Security Risk Management Subject Matter Expert drives complex security risk management operations, including Assessment and Authorization (A&A), continuous monitoring, and FISMA compliance for the agency.

Essential Job Functions

The SME is tasked with implementing emerging risk management practices and applying NIST 800 series and CNSSI 1253 security controls to secure cloud and hybrid environments.

QualificationsMinimum Position Requirements

• At least 10 years of total related experience and must include at least 2 years of recent experience in each of the following areas: A&A, FISMA compliance, IC cybersecurity policy and standards, continuous monitoring, Cross Domain Solutions, and secure cloud and hybrid engineering

Certifications

• Required: CISM, CAP, or GRC Certification, or comparable demonstrable experience
• Desired: Certifications in AWS, Microsoft Azure, and Microsoft Office 365 cloud platforms

SierTeK is an equal opportunity employer. Employment is decided based on qualifications, merit, and business need. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability, protected Veteran status, gender identity and sexual orientation.

This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, transfer, leaves of absence, compensation, and training.

If you need assistance or accommodation due to a disability, you may contact us at 1+833.743.7835.

*This job posting is to identify potential candidates for positions in order to respond to a request for proposal. This job posting, including but not limited to, qualifications, duties, compensation and benefits, is subject to change based on the terms and conditions of the awarded contract and is contingent on SierTeK being awarded the contract