CYBERSECURITY ASSESSMENT AND AUTHORIZATION SUBJECT MATTER EXPERT (SME)
Location: Remote
Position Type: Multiyear Contract
Security Clearance: [ship with Public trust / Secret / Top Secret -- Required]
Serves as a cybersecurity Subject Matter Expert (SME) with regards to Assessment and Authorization (A&A) of information systems and all associated cybersecurity policies and procedures. Executes (federal agencies), cybersecurity processes to authorize information systems, maintain authorization of information systems, or serves as a Subject Matter Expert (SME) for systems undergoing the authorization process. Possess an understanding of how security controls identified in the NIST 800-53 apply to the process of assessing and authorizing a large organization s IT infrastructure (federal agencies), in which there is a compilation of large and small enclaves, Cloud Hosted Services, Operational Technology, AIS applications and outsourced IT processes. Determines the residual risk of an identified vulnerability (e.g., non-compliant security control) and determines the possible ramifications on the system s current or future authorization. Briefs senior management on the progress or results of an information system undergoing the Risk Management Framework (RMF) process.
Requirements:
Experience in assessing security controls and conducting authorization reviews for large, complex organizations
