Cybersecurity Risk Management SME

Job Details

Job Type: Full-Time

Clearance: TS/SCI

Must be a U.S. Citizen.

A Cybersecurity Risk Management Subject Matter Expert is responsible for supporting the Assessment and Authorization (A&A) processes in compliance with the Risk Management Framework (RMF) policy DoDI 8510.01. This role involves providing expert guidance in system risk mitigation, advising the J683, and managing authorizations within the USINDOPACOM AO's DoDIN Area of Responsibility (DAO). The specialist will facilitate various AO Authorizations and offer Subject Matter Expertise in security categorization, security control selection, and compliance assessments.

A qualified candidate will perform the following duties and responsibilities, but are not limited to:

• Notify system owners and the J683 of system authorization expirations.
• Assess and validate Cybersecurity Controls in accordance with USINDOPACOM procedures.
• Assist in updating systems security documentation for the Security Authorization Package (SAP).
• Provide completed SAP for AO-DR review.
• Update systems databases with Authorization status and artifacts.
• Report performance objectives and deliverables to the J683.

• Must have experience in the validation of Cybersecurity controls for the A&A of systems within the DoD.
• Must have experience with all phases of A&A in the RMF process.
• Must have experience with automated C&A and A&A toolsets (e.g., Enterprise Mission Assurance Support Service (eMASS).
• Must be able to integrate automated toolset results with security assessment submissions (i.e. Security Assessment Plans, Security Assessment, Risk Assessment Reports, etc.).
• Experience using Microsoft Office tools (Project, Word, PowerPoint, Excel, Visio and Outlook).
• Experience with contract financial management.

• Minimum High School Diploma.
• Must have at least 5 years' experience with managing, developing, or preparing RMF the A&A of systems within the DoD.
• IAW DoDM 8140.03, must meet the advanced personnel certification.
• IAM-III Certification (CISM, CISSP or Associate, GSLC, CCISO).

• Typical office environment.

• Not required.

• Medical, dental, and vision coverage.
• 401k matching.
• Generous PTO.
• Paid holidays.
• Professional training opportunities.
• Pet insurance.

Salary range: $ to $ (annualized USD).

Castalia Systems is an equal employment opportunity and affirmative action employer and strives to comply with all applicable laws prohibiting discrimination based on race, color, creed, sex, sexual orientation, age, national origin, or ancestry, physical or mental disability, veteran status, marital status, HIV-positive status, as well as any other category protected by federal, state, or local laws. All such discrimination is unlawful, and all persons involved in the operations of the company are prohibited from engaging in this type of conduct.