Cybersecurity Subject Matter Expert; SME

RESULTS. INNOVATION. VALUES. ACCOUNTABILITY.

That’s RIVA.

We’re a mission-driven IT services company and systems integrator supporting digital transformation and modernization for federal government agencies. Since 2009, we’ve partnered with our customers to solve complex challenges through smart, practical innovation to deliver real outcomes where they matter most. Our teams are made up of industry-leading experts who are passionate about doing great work and making a difference. We don’t just develop solutions, we support efforts that strengthen communities and serve the public good.

RIVA’s culture is built on four core values:
Results, Innovation, Values, and Accountability. They guide how we work, how we collaborate, and how we measure success. Our employee-first approach is rooted in trust, ownership, and meaningful work. By investing in our people and fostering a flexible, supportive environment, employees have the opportunity to grow their skills, contribute ideas, and make an impact from day one. all while supporting missions that matter.

The Cybersecurity Subject Matter Expert (SME) will support Department of Commerce (DOC) and Bureau of Industry and Security (BIS) cybersecurity initiatives focused on supply chain risk management, system security compliance, and risk mitigation. This role supports the development and execution of cybersecurity strategies and compliance activities aligned with Federal cybersecurity standards and mandates

• Provide subject matter expertise and technical analysis in support of supply chain risk management and cybersecurity initiatives.
• Apply cybersecurity principles, methods, and knowledge to support complex technical requirements and deliverables.
• Plan, develop, finalize, and review key cybersecurity program deliverables for DOC and BIS environments.
• Support compliance efforts aligned with FISMA, NIST, OMB, and other Federal cybersecurity standards and guidance.
• Identify unique system characteristics and conduct interviews with technical, administrative, and executive personnel.
• Collaborate with OCIO teams to develop and maintain required cybersecurity documentation, including security categorizations, risk assessments, contingency plans, security test and evaluation reports, and vulnerability assessment reports.
• Map technical requirements, system functionality, and operational capabilities to prescribed security controls, policies, and practices.
• Analyze data collected from open-source, high-side, data calls, and other intelligence sources.
• Present cybersecurity findings and recommendations in both detailed and executive-level formats for internal and external stakeholders.

• Minimum MS/MA degree and related industry certifications
• Minimum 8 years of experience in similar position
• Demonstrated experience supporting Federal cybersecurity programs and risk management initiatives.
• Strong understanding of FISMA, NIST, OMB, and Federal cybersecurity compliance requirements.
• Experience developing cybersecurity documentation, assessments, and security control mappings.
• Knowledge of supply chain risk management principles and cybersecurity best practices.
• Experience conducting vulnerability assessments, risk assessments, and security testing activities.
• Strong analytical and problem-solving skills with the ability to communicate technical findings to diverse audiences.
• Ability to work collaboratively with technical, administrative, and executive stakeholders.
• Excellent written and verbal communication skills.
• Ability to manage multiple priorities in fast-paced Federal environments.

• Relevant cybersecurity certifications such as CISSP, CISM, Security+, or equivalent.
• Experience supporting…