Cybersecurity Risk Management SME

Castalia Systems

$120K — $142K *
Education, Government & Non-Profit
5 - 7 years of experience
Job Overview by Ladders

Qualifications

  • 5+ years of experience in A&A of DoD systems
  • Mastery in RMF process and all A&A phases
  • Experience with automated C&A tools (e.g., eMASS)
  • Proficient in integrating automated tool results into security assessments
  • Skilled in Microsoft Office suite
  • Understanding of financial management for contracts
  • Advanced personnel certification as per DoDM 8140.03 (IAM-III Certification)

Responsibilities

  • Notify system owners of authorization expirations
  • Assess and validate Cybersecurity controls per USINDOPACOM procedures
  • Update security documentation for Security Authorization Packages
  • Provide completed SAP for review by AO-DR
  • Maintain updated databases with Authorization statuses
  • Report performance objectives and deliverables to the J683

Benefits

  • Medical, dental, and vision coverage
  • 401k matching
  • Generous PTO and paid holidays
  • Professional training opportunities
  • Pet insurance for furry family members
Full Job Description
Job Type: Full-Time

Clearance: TS/SCI

Must be a U.S. Citizen

Benefits: Medical, dental, and vision coverage, 401k matching, generous PTO, paid holidays, professional training opportunities, and even pet insurance to ensure your furry friends are cared for too.

Job Summary

A Cybersecurity Risk Management Subject Matter Expert is responsible for supporting the Assessment and Authorization (A&A) processes in compliance with the Risk Management Framework (RMF) policy DoDI 8510.01. This role involves providing expert guidance in system risk mitigation, advising the J683, and managing authorizations within the USINDOPACOM AO's DoDIN Area of Responsibility (DAO). The specialist will facilitate various AO Authorizations and offer Subject Matter Expertise in security categorization, security control selection, and compliance assessments.

Roles and Responsibilities

A qualified candidate will perform the following duties and responsibilities, but are not limited to:
  • Notify system owners and the J683 of system authorization expirations.
  • Assess and validate Cybersecurity Controls in accordance with USINDOPACOM procedures.
  • Assist in updating systems security documentation for the Security Authorization Package (SAP).
  • Provide completed SAP for AO-DR review.
  • Update systems databases with Authorization status and artifacts.
  • Report performance objectives and deliverables to the J683.

Knowledge and Skills
  • Must have experience in the validation of Cybersecurity controls for the A&A of systems within the DoD.
  • Must have experience with all phases of A&A in the RMF process.
  • Must have experience with automated C&A and A&A toolsets (e.g. Enterprise Mission Assurance Support Service (eMASS).
  • Must be able to integrate automated toolset results with security assessment submissions (i.e. Security Assessment Plans, Security Assessment, Risk Assessment Reports, etc.).
  • Experience using Microsoft Office tools (Project, Word, PowerPoint, Excel, Visio and Outlook).
  • Experience with contract financial management.

Education
  • Minimum High School Diploma.
  • Must have at least 5 years' experience with managing, developing, or preparing RMF the A&A of systems within the DoD.
  • IAW DoDM 8140.03, must meet the advanced personnel certification.
  • IAM-III Certification (CISM, CISSP or Associate, GSLC, CCISO)

Physical Requirements/Work Environment
  • Typical office environment.

Travel
  • Not required.

Compensation

At Castalia Systems, we provide you with opportunities and choices and support your total well-being. Our benefits include: Medical, dental, vision coverage, 401k matching, generous PTO, paid holidays, professional training opportunities, and even pet insurance to ensure your furry friends are cared for too. All regularly scheduled employees working at least 30 hours per week are eligible to participate in Castalia Systems' benefit programs. Individuals that do not meet the threshold are only eligible for select offerings, not inclusive of health benefits.

Salary at Castalia Systems is determined by various factors, including but not limited to location, position knowledge, skills, competencies, and experience, as well as contract-specific affordability and organizational requirements. The projected compensation range for this position is $120,000.00 to $142,000.00 (annualized USD). The estimate displayed represents the typical salary range for this position and is just one component of Castalia Systems' total compensation package for employees.

#CJ

Similar Jobs

More Jobs at Castalia Systems

More Education, Government & Non-Profit Jobs

Find similar Cybersecurity Risk Management SME jobs: