Subject Matter Expert-Program Protection Cybersecurity

Description

Chevo LLC is currently hiring a Subject Matter Expert - Program Protection/Cybersecurity to join our expanding firm to join our U.S. Coast Guard Office of Acquisition Support and Systems Engineering Policy (CG-SID-9) team. This position provides support and oversight to the Program Management Offices of major and non-major systems acquisitions and is the primary point of contact with the Department of Homeland Security (DHS) for the acquisition review process.

The ideal candidate will have extensive cybersecurity and program protection expertise with deep knowledge of DHS and DoD cybersecurity policies. This position will be at the client site located in Washington, DC.

• Provide subject matter expertise in the development and management of USCG acquisition policy for Cybersecurity / Program Protection in support of all CG Level 1, 2, and 3 acquisitions, including advisory support to USCG personnel, offering expert recommendations and insights regarding Cybersecurity / Program Protection policies and practices
• Assist in drafting, reviewing, and updating relevant policy documents, guidelines, and templates to ensure alignment with current DHS and DoD Cybersecurity policies
• Engage with stakeholders through meetings and consultations to gather information, discuss cybersecurity concerns, and propose actionable solutions
• Support the integration of Cybersecurity / Program Protection into the Systems Engineering Lifecycle (SELC) and Risk Management Framework, ensuring compliance with NIST Special Publications 800-160 and 800-37
• Define Cybersecurity/Program Protection stakeholder objectives, needs and concerns, security requirements, and associated validation methods
• Develop processes to conduct Critical Program Information (CPI) analysis and Criticality Analysis (CA) to identify CPI, Critical Functions (CF), and Critical Components (CC) as part of developing a comprehensive Program Protection Plan (PPP)
• Identify, quantify, and evaluate the costs/benefits of security functions and considerations to inform analysis of alternatives, engineering trade-offs, and risk management
• Review and provide actionable feedback for Cybersecurity / Program Protection related acquisition program documents including the USCG Acquisition Cybersecurity Strategy (ACSP), Program Protection Plan (PPP), Risk Assessment Report (RAR), Cybersecurity Risk Recommendation Memo (CRRM), and USCG Cybersecurity Manual (COMDTINST 5500.13 series)

• Bachelor’s degree in cybersecurity, information security, information assurance, computer science (with cybersecurity concentration), systems engineering (with cybersecurity/information assurance focus) or similar fields.
• Current Secret Clearance or ability to obtain one
• 15+ years of relevant Cybersecurity and Program Protection experience
• Proficiency with Microsoft Office suite
• Strong oral and written communication skills and the ability to present a polished and professional image to clients
• Deep knowledge of NIST Special Publications 800-160 and 800-37, Systems Engineering Lifecycle (SELC), and Risk Management Framework Understanding of the 2017 Memorandum of Agreement between DHS and DoD regarding Cybersecurity and System Security Engineering policies Experience developing security requirements and conducting Critical Program Information (CPI) analysis
• Ability to produce comprehensive written products including policy documents, guidelines, and technical reports

• Master’s degree cybersecurity, information security, information assurance, computer science (with cybersecurity concentration), systems engineering (with cybersecurity/information assurance focus) or similar fields
• Certified Information Systems Security Professional (CISSP) - Industry standard or Certified Authorization Professional (CAP) - Directly relevant to Risk Management Framework or
• DoD 8570/8140 IAM Level III or IASAE Level III
• Active DHS/USCG Entry of Delivery (EOD) clearance
• Experience with DHS Cybersecurity Through the Acquisition Lifecycle Framework (DHS Instruction ) and DoD Risk Management Framework for DoD Information Technology…