Description

CALIBRE is an employee-owned, mission-focused solutions and digital transformation company.

CALIBRE is seeking a Cybersecurity Assessment and Authorization (A&A) Subject Matter Expert (SME) to support the Defense Logistics Agency (DLA). The Cybersecurity A&A SME will provide subject-matter expertise related to the assessment and authorization of information systems and associated cybersecurity policies and procedures.

The selected candidate will execute DoW/DLA cybersecurity processes to authorize information systems, maintain existing system authorizations, and support systems undergoing the authorization process.

Responsibilities

• Serve as a cybersecurity subject matter expert for the assessment and authorization of information systems.
• Execute DoW/DLA cybersecurity processes supporting initial and ongoing system authorization.
• Support information systems throughout the Risk Management Framework (RMF) process.
• Assess security controls identified in NIST Special Publication 800-53.
• Conduct security-control assessments and authorization reviews for large, complex enterprise environments.
• Support the assessment and authorization of large and small enclaves, cloud-hosted services, Operational Technology (OT), Automated Information System (AIS) applications, and outsourced IT processes.
• Evaluate identified vulnerabilities and noncompliant security controls.
• Determine the residual risk associated with identified vulnerabilities.
• Assess the potential impact of cybersecurity vulnerabilities on a system's current or future authorization.
• Brief senior management on the progress, findings, and results of information systems undergoing the RMF process.

• Knowledge of the Risk Management Framework.
• Knowledge of NIST Special Publication 800-53 security controls.
• Knowledge of DoD and DLA cybersecurity policies and procedures.
• Ability to assess security controls and conduct authorization reviews.
• Ability to evaluate cybersecurity vulnerabilities and determine residual risk.
• Ability to assess the impact of security-control deficiencies on system authorizations.
• Ability to support the authorization of complex enterprise IT environments.
• Strong analytical, risk-assessment, written communication, and presentation skills.
• Ability to brief senior management on RMF activities and authorization decisions.
• Active Secret security clearance.
• DoD-approved 8570/8140 IAM Level III baseline certification.
• Moderate Risk, Non-Critical Sensitive Tier 3 (T3), NACLC, or ANACI investigation at the time of proposal submission.

• Minimum of five years of relevant Certification and Accreditation or Assessment and Authorization experience.
• Experience applying the RMF and NIST assessment and authorization processes.
• DoD cybersecurity experience.
• Experience assessing security controls.
• Experience conducting authorization reviews for large, complex organizations.
• Experience supporting cybersecurity authorization activities for enterprise information systems.

PI286197667