About this role:General Matter is seeking a classified cyber assurance expert to build out our GRC and RMF processes within the Software organization to ensure mission success. The candidate for this role will have strong ownership over the following aspects of General Matter's information systems security program:
- Relationship: the candidate will be the representative and primary owner of General Matter's information systems security program, and relate it to the needs of both internal and external parties
- Assessment: the candidate will be the subject matter expert within the General Matter Software organization for all processes related to regulatory compliance
- Delivery: the candidate will be responsible for clarifying and interpreting all requirements to unblock engineering teams and be responsible for delivering compliance with those requirements
Responsibilities:- Responsible for owning the RMF lifecycle to ensure regulatory compliance for General Matter classified information systems
- Ensure that all General Matter classified information systems remain provably compliant within regulatory requirements
- Actively collaborate with internal engineering teams to own regulatory overhead risk and ensure mission success without compromising on security
- Work with software engineers to evaluate and build automated tools to drive security policy assessment, auditing, and enforcement at scale
- Work with government partners to plan and coordinate external audits and tests
- Assist in building out the GRC suite of tools that will be used across all classified information systems at General Matter
- Ability to cut through ambiguous definitions and solve problems from first principles
- Build security into the General Matter operational model as a first-order requirement at all levels of the software stack
Basic Qualifications:- Evidence of exceptional ability (prior projects, portfolio of work, completed products, etc).
- Strong understanding of engineering fundamentals.
- Ability to perform trade studies and make clear recommendations using first principles and engineering fundamentals even with partial information.
- 3+ years of managing cyber assurance for classified computer networks
Preferred Skills and Experience:- Experience with operating in a NIST 800-53 enivronment
- Experience in a fast-paced engineering or highly technical environment, with a resourceful approach to delivering under tight timelines or budget constraints.
- Experience building an approved classified space from the ground up on ambitious timelines
- Expertise with the 7-step RMF process and how it relates to modern software development
- Experience implementing 10 CFR Part 810 export-control and U.S.-person access restrictions as enforced technical controls on classified systems, in coordination with the FSO.
- Experience obtaining ATOs under DoD or DOE authorization boundaries
- Expertise with COMSEC procedures and practices
- Experience writing and delivering complex software systems in a highly regulated environment
Additional Requirements:- Ability to obtain and maintain a DoE Q-level clearance eligibility
- Ability to work extended hours and weekends as necessary.
Compensation and BenefitsThe base salary range for this role is
$180,000-$260,000 annually.
Compensation bands are determined by role, level, location, and alignment with market data. Individual level and base pay is determined on a case-by-case basis and may vary based on job-related skills, education, experience, technical capabilities and internal equity. Please note that the stated salary range is an estimate and may be adjusted based on market conditions, business needs, or other factors. In addition to base salary, for full-time hires, you may also be eligible for long-term incentives, in the form of stock options, and access to medical, vision & dental coverage as well as access to a 401(k) retirement plan.
