Cybersecurity Assessment & Authorization SME at Connected Logistics

Huntsville, Alabama, United States -

Full Time

Start Date

Immediate

Expiry Date

15 Sep, 26

Salary

140000.0

Posted On

17 Jun, 26

Experience

5 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

Risk Management Framework, NIST 800-53, Assessment and Authorization, Cybersecurity Policy, Vulnerability Assessment, Cloud Security, Industrial Control Systems, Operational Technology, Analytical Writing, Microsoft Office

Industry

Defense and Space Manufacturing

Description

Description Remote Contingent Upon Contract Award Connected Logistics is seeking a Cybersecurity Assessment & Authorization SME to support DLA's Information Operations J62FG. This program is responsible for the application development and sustainment of several identity-related programs in Legacy AMPS. J62FG is also responsible for supporting applications that are migrating from Legacy AMPS to DOW E-ICAM. The Cybersecurity Assessment & Authorization SME serves as a cybersecurity Subject Matter Expert (SME) with regards to Assessment and Authorization (A&A) of information systems and all associated cybersecurity policies and procedures. Key Responsibilities: The Cybersecurity Assessment & Authorization SME performs a DOD cybersecurity process while either authorizing an information system or serving as a SME for an information system undergoing authorization. Specific duties for this position include but aren't limited to: Possesses an understanding of how the security controls identified in the NIST 800-53 apply to the process of assessing and authorizing a large organization’s IT infrastructure such as DLA’s, in which there is a compilation of large and small enclaves, AIS applications and outsourced IT processes. Determines the applicable severity value for an identified vulnerability (e.g., non-compliant security control). Determines the possible ramifications on the system’s current or future authorization. Briefs senior management on the progress or results of an information system undergoing the Risk Management Framework (RMF) process. Preferred Qualifications: Possess excellent analytical and writing skills Possess Microsoft Office programs (Excel, Word, PowerPoint, MS Project, etc.) knowledge. Possess experience working with DoD/DLA. Requirements Must be a U.S. Citizen. Possess five (5) years of relevant Risk Management Framework (RMF) and NIST Assess & Analyze (A&A) experience. Possess DoD cybersecurity experience. Possess experience in assessing security controls and conducting authorization reviews for large, complex organizations. Possess experience in the general tenets supporting the overall DoD implementation of its authorization process, to include supporting cybersecurity policy, procedures, and processes. Possess knowledge in the cybersecurity of emerging technology areas such as Cloud and Industrial Control Systems (ICSs), warehouse execution systems and Operational Technology (OT) infrastructures. Must possess IT-II Non-Critical Sensitive security clearance or Tier 3 (T3) at time of proposal submission. Total Rewards Statement We believe in fairness and clarity throughout our hiring process. The anticipated salary range for this position is $115,000.00 to $140,000.00 USD. This is a good-faith range based on factors such as your experience, geographic location, and any applicable contractual requirements, and may vary slightly. Beyond salary, we provide a robust benefits package and encourage ongoing professional development, because your growth and well-being matter to us. We’re excited to support you in building a rewarding career with us! Connected Logistics respects the need for confidentiality for all applicants. Connected Logistics offers an excellent benefits package that includes health, dental, vision, life, and disability insurance, a great 401(k) package, and generous Paid Time Off. EOE/Disability/Veterans

Responsibilities

Serve as a Subject Matter Expert for the Assessment and Authorization of information systems within DLA's Information Operations. Responsibilities include applying NIST 800-53 controls, determining vulnerability severity, and briefing senior management on RMF progress.