Cybersecurity Assessment and Authorization Subject Matter Expert (SME)

, REMOTE

Job ID: 5452

CALIBRE is an employee-owned, mission-focused solutions and digital transformation company.

CALIBRE is seeking a Cybersecurity Assessment and Authorization (A&A) Subject Matter Expert (SME) to support the Defense Logistics Agency (DLA). The Cybersecurity A&A SME will provide subject-matter expertise related to the assessment and authorization of information systems and associated cybersecurity policies and procedures.

The selected candidate will execute DoW/DLA cybersecurity processes to authorize information systems, maintain existing system authorizations, and support systems undergoing the authorization process.

Responsibilities

• Serve as a cybersecurity subject matter expert for the assessment and authorization of information systems.
• Execute DoW/DLA cybersecurity processes supporting initial and ongoing system authorization.
• Support information systems throughout the Risk Management Framework (RMF) process.
• Assess security controls identified in NIST Special Publication 800-53.
• Conduct security-control assessments and authorization reviews for large, complex enterprise environments.
• Support the assessment and authorization of large and small enclaves, cloud-hosted services, Operational Technology (OT), Automated Information System (AIS) applications, and outsourced IT processes.
• Evaluate identified vulnerabilities and noncompliant security controls.
• Determine the residual risk associated with identified vulnerabilities.
• Assess the potential impact of cybersecurity vulnerabilities on a system’s current or future authorization.
• Brief senior management on the progress, findings, and results of information systems undergoing the RMF process.

Required Skills

• Knowledge of the Risk Management Framework.
• Knowledge of NIST Special Publication 800-53 security controls.
• Knowledge of DoD and DLA cybersecurity policies and procedures.
• Ability to assess security controls and conduct authorization reviews.
• Ability to evaluate cybersecurity vulnerabilities and determine residual risk.
• Ability to assess the impact of security-control deficiencies on system authorizations.
• Ability to support the authorization of complex enterprise IT environments.
• Strong analytical, risk-assessment, written communication, and presentation skills.
• Ability to brief senior management on RMF activities and authorization decisions.
• Active Secret security clearance.
• DoD-approved 8570/8140 IAM Level III baseline certification.
• Moderate Risk, Non-Critical Sensitive Tier 3 (T3), NACLC, or ANACI investigation at the time of proposal submission.
•  

required Experience

• Minimum of five years of relevant Certification and Accreditation or Assessment and Authorization experience.
• Experience applying the RMF and NIST assessment and authorization processes.
• DoD cybersecurity experience.
• Experience assessing security controls.
• Experience conducting authorization reviews for large, complex organizations.
• Experience supporting cybersecurity authorization activities for enterprise information systems.

CALIBRE is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, sex, sexual orientation, gender identity, religion, national origin, disability, veteran status, age, marital status, pregnancy, genetic information, or other legally protected status. For our EEO Policy statement, please click here. If you would like more information on your EEO rights under the law, please click here.

If you would like to contact us regarding the accessibility of our website of need assistance completing the application process, please contact accommodations@calibresys.com or call 703.797.8732. Please note this contact information is for accommodations only.