Cybersecurity Assessment And Authorization Subject Matter Expert (SME) (61123)

Job Summary 

Serves as a Cybersecurity Subject Matter Expert (SME) responsible for supporting the Assessment and Authorization (A&A) of information systems in accordance with Department of Defense (DoD) cybersecurity policies, the Risk Management Framework (RMF), and applicable cybersecurity standards. Provides technical expertise in the implementation, assessment, and authorization of information systems, evaluates cybersecurity risks and vulnerabilities, and advises senior leadership on authorization status and compliance efforts.

• Key Responsibilities

  • Serves as a Cybersecurity Subject Matter Expert (SME) for Assessment and Authorization (A&A) activities supporting DoD information systems.
  • Performs cybersecurity activities required to authorize information systems in accordance with the Risk Management Framework (RMF).
  • Provides technical expertise for information systems undergoing the authorization process.
  • Applies National Institute of Standards and Technology (NIST) Special Publication 800-53 security controls during the assessment and authorization process.
  • Evaluates cybersecurity requirements across complex enterprise IT environments, including enclaves, applications, and outsourced IT services.
  • Identifies security control deficiencies and determines the appropriate severity of vulnerabilities.
  • Assesses the impact of identified vulnerabilities on an information system's current or future authorization.
  • Develops recommendations to address cybersecurity risks and improve system compliance.
  • Briefs senior management on the status, progress, and results of RMF and authorization activities.
  • Ensures compliance with applicable DoD cybersecurity policies, procedures, and security standards.

Clearance Requirements

Must possess an IT-II Non-Critical Sensitive designation with a current Tier 3 (T3) background investigation at the time of proposal submission.

Required Skills & Certifications

• Five (5) years of relevant Risk Management Framework (RMF) and NIST Assessment and Authorization (A&A) experience.
• Department of Defense (DoD) cybersecurity experience.
• Experience assessing security controls and conducting authorization reviews for large, complex organizations.
• Experience supporting the Department of Defense (DoD) authorization process, including cybersecurity policies, procedures, and processes.
• Knowledge of cybersecurity principles related to emerging technologies, including cloud computing, Industrial Control Systems (ICS), warehouse execution systems, and Operational Technology (OT) infrastructures.
• Must possess an IT-II Non-Critical Sensitive designation or Tier 3 (T3) background investigation at the time of proposal submission.

Overview

BMA is an employee-owned small business headquartered in Huntsville, AL that provides superior customer service by empowering all levels of our staff to make timely decisions to produce high-quality results. BMA fosters an environment of passion, precision, and dedication in order to fulfill our commitments to our partners, government, and country.

Benefits

We believe that our employees well-being is paramount to our success so our benefits package has been crafted with that in mind. We offer multiple healthcare coverage options to include low deductible, high deductible, and plans eligible for our Health Savings Account (HSA) option. Along with medical coverage, employees have dental, vision, accident & illness, short- and long-term disability all available to them. BMA proudly maintains a 401(k) plan with an industry leading 6% match that can include profit sharing based on company performance. Lastly, being an employee-owned company means that BMA offers a 100% Employee Stock Ownership Plan (ESOP), providing eligible employees the opportunity to earn stock in BMA, subject to plan eligibility and vesting requirements. 

AAP & EEO Statement
 Beshenich Muir & Associates, LLC (BMA) is an Equal opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regards to race, color, religion, religious creed, gender, sexual orientation, gender identity, gender expression, transgender, pregnancy, marital status, national origin, ancestry, citizenship status, age, disability, protected Veteran Status, genetics or any other characteristics protected by applicable Federal, State, or Local Law.