Cybersecurity Assessment & Authorization SME at Connected Logistics

Columbus, Ohio, United States -

Full Time

Start Date

Immediate

Expiry Date

16 Oct, 26

Salary

125000.0

Posted On

18 Jul, 26

Experience

5 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

Assessment and Authorization, Risk Management Framework, NIST 800-53, Cybersecurity Policy, Vulnerability Assessment, Analytical Writing, Microsoft Office, Security Control Assessment

Industry

Defense and Space Manufacturing

Description

Description Remote role but must live within 150 miles of one of the following DLA Locations: Battle Creek MI, Columbus OH, New Cumberland PA, Philadelphia PA, Ft. Belvoir VA (HQ), or Richmond VA Contingent Upon Contract Award Connected Logistics is seeking a Cybersecurity Assessment & Authorization SME to assist in managing the implementation, maintenance and monitoring of cybersecurity in support of J6 Program Executive Officer's Portfolio of IT capabilities, associated Program Management Offices, IT infrastructure support and Operational Technology areas for Information Systems/Programs throughout the entirety of its system development life cycle. The Cybersecurity Assessment & Authorization SME serves as a cybersecurity Subject Matter Expert (SME) with regards to Assessment and Authorization (A&A) of information systems and all associated cybersecurity policies and procedures. Key Responsibilities: The Cybersecurity Assessment & Authorization SME executes DoW/DLA cybersecurity processes to authorize information systems, maintain authorization of information systems, or serves as a Subject Matter Expert (SME) for systems undergoing the authorization process. Specific duties for this position include but aren't limited to: Possessing an understanding of how security controls identified in the NIST 800-53 apply to the process of assessing and authorizing a large organization’s IT infrastructure such as DLA, in which there is a compilation of large and small enclaves, Cloud Hosted Services, Operational Technology, AIS applications and outsourced IT processes. Determining the residual risk of an identified vulnerability (e.g., non-compliant security control) and determines the possible ramifications on the system’s current or future authorization. Briefs senior management on the progress or results of an information system undergoing the Risk Management Framework (RMF) process. Preferred Qualifications: Possess excellent analytical and writing skills. Possess Microsoft Office programs (Excel, Word, PowerPoint, MS Project, etc.) knowledge. Possess experience working with DoD/DLA. Requirements Must be a U.S. Citizen. Five (5) years of relevant C&A experience; Risk Management Framework (RMF) and NIST C&A experience; DOD cybersecurity experience. Experience in assessing security controls and conducting authorization reviews for large, complex organizations. DoD Approved 8570 Baseline Certification: Category IAM Level III (CISSP, CISM, GSLCGSLC, or CCISO) Must possess IT-II Non-Critical Sensitive/ Secret security clearance (T3) at time of proposal submission. Total Rewards Statement We believe in fairness and clarity throughout our hiring process. The anticipated salary range for this position is $115,000.00 to $125,000.00 USD. This is a good-faith range based on factors such as your experience, geographic location, and any applicable contractual requirements, and may vary slightly. Beyond salary, we provide a robust benefits package and encourage ongoing professional development, because your growth and well-being matter to us. We’re excited to support you in building a rewarding career with us! Connected Logistics respects the need for confidentiality for all applicants. Connected Logistics offers an excellent benefits package that includes health, dental, vision, life, and disability insurance, a great 401(k) package, and generous Paid Time Off. EOE/Disability/Veterans

Responsibilities

Manage the implementation, maintenance, and monitoring of cybersecurity for the J6 Program Executive Officer's portfolio. Execute DLA cybersecurity processes to authorize and maintain information systems throughout their development life cycle.