Cybersecurity Assessment and Authorization Subject Matter Expert (SME)

Job Title : Cybersecurity Risk and Authorization SME

Location : Remote

Summary :

Mission is to plan, assess, execute and oversee cloud hosting solutions for all DLA systems and services in DLA managed cloud environments, encompassing Microsoft Azure, Amazon Web Services (AWS), Oracle Cloud Infrastructure (OCI), Google Cloud Platform (GCP). These cloud environments are in geographically dispersed locations and are architected to meet US Department of Defense (DoD) security requirements for Cloud Computing Security Requirements (SRG) Impact Level 4 (IL4) and Impact Level 5 (IL5) restrictions

Responsibilities :

• Serves as a cybersecurity Subject Matter Expert (SME) with regards to Assessment and Authorization (A&A) of information systems and all associated cybersecurity policies and procedures
• Performs a DOD cybersecurity process serving as a SME for an information system undergoing authorization
• Possess an understanding of how the security controls identified in the NIST 800-53 apply to the process of assessing and authorizing a large organization's IT infrastructure such as DLA's, in which there is a compilation of large and small enclaves, AIS applications and IT processes
• Determines the applicable severity value for an identified vulnerability (e.g., non-compliant security control) and determines the possible ramifications on the system's current or future authorization.
• Provides audit readiness and sustainment support by participating in all phases of audit and creates compliance documentation
• Ensure Cybersecurity compliance and corresponding RMF, ATO, audit documentation is maintained in a repository to include any dates and / or modifications to all relevant documented artifacts

Requirements :