Cyber Security Consultant

Information Technology Strategies, Inc. is a government IT solutions provider servicing commercial and government initiatives in various parts of the United States. They are currently seeking a Cybersecurity Assessment and Authorization Expert to serve as a Subject Matter Expert in cybersecurity policies and procedures, particularly in the Assessment and Authorization of information systems.

Responsibilities:

• Serves as a cybersecurity Subject Matter Expert (SME) with regards to Assessment and Authorization (A&A) of information systems and all associated cybersecurity policies and procedures
• Performs a DOD cybersecurity process while either authorizing an information system or serving as a SME for an information system undergoing authorization
• Possess an understanding of how the security controls identified in the NIST 800-53 apply to the process of assessing and authorizing a large organization’s IT infrastructure such as DLA’s, in which there is a compilation of large and small enclaves, AIS applications and outsourced IT processes
• Determines the applicable severity value for an identified vulnerability (e.g., non-compliant security control) and determines the possible ramifications on the system’s current or future authorization
• Briefs senior management on the progress or results of an information system undergoing the Risk Management Framework (RMF) process

Requirements:

• Must possess IT-II security clearance or have a current National Agency Check with Local Agency Check and Credit Check (NACLC). (Basic Federal Clearance requirements are U.S. Citizenship, clear criminal history check, no recent or pending bankruptcies)
• Must have DLA CERT Analyst will maintain CSSP Analyst certification: CySA+, CFR (CyberSec First Responder), or CEH (Certified Ethical Hacker) certifications
• Five (5) years of relevant Risk Management Framework (RMF) and NIST A&A experience
• Must have DOD cybersecurity experience
• Experience in assessing security controls and conducting authorization reviews for large, complex organizations
• Experienced in the general tenets supporting the overall DOD implementation of its authorization process, to include supporting cybersecurity policy, procedures, and processes
• Knowledgeable in the cybersecurity of emerging technology areas such as Cloud and Industrial Control Systems (ICSs), warehouse execution systems and Operational Technology (OT) infrastructures
• Excellent oral and written communication skills