TS-Cleared Senior IT Security & Assessment SME

ECS; Washington (District of Columbia); On-site; USD 150,000 - 190,000; Full time

Job summary

ECS is seeking a TS-cleared Senior IT Subject Matter Expert (SME) / Security Control Assessment to support a DOJ program in Washington, DC. You will provide senior technical expertise to OCIO security control assessments, translating complex evidence into defensible risk and authorization support.

You will evaluate architecture, control implementation, evidence quality, risks, findings, and recommendations, supporting rigorous assessment reports, evidence traceability, remediation, and

Qualifications

• US citizenship with active Top Secret clearance.
• Master's degree or equivalent; or one of the listed certifications.
• Eight years of relevant work experience.
• Must meet FBI TS/SCI, background, training, facility-access, and polygraph requirements.
• Experience with enterprise change management and evidence traceability.
• Familiarity with change workflows and governance-board coordination.
• Ability to apply comprehensive change management across high impact tasks.

Responsibilities

• Provide senior technical expertise to OCIO security control assessments and translate evidence into defensible risk posts.
• Evaluate architecture, control implementation, evidence quality, risks, findings and recommendations.
• Support rigorous assessment reports, traceability of evidence, remediation recommendations, and continuous improvement of SCA methods and tools.
• Mentor assessors and contribute to DOJ cybersecurity process improvements.

Skills

SCA/RMF

NIST 800-53

Enterprise architecture

Technical writing

Risk analysis

FBI/DOJ processes

Mentor assessors

Education

Master's degree in CS/CE or related

Certifications: CCISO, CISA, CISM, CISSP, CISSP-ISSEP, CySA+, GSLC, GSNA

Tools

JIRA

Job description

ECS is seeking a TS-cleared Senior IT Subject Matter Expert (SME) / Security Control Assessment to support a DOJ program in Washington, DC. You will provide senior technical expertise to OCIO security control assessments, translating complex evidence into defensible risk and authorization support.

You will evaluate architecture, control implementation, evidence quality, risks, findings, and recommendations, supporting rigorous assessment reports, evidence traceability, remediation, and