Senior RMF Subject Matter Expert

Job Requirements :

• 8 years of Executive-Level cyber RMF consulting experience advising Cybersecurity programs in large federal organizations.
• Strong interpersonal and human relations skills, including ability to communicate technical concepts to non-technical personnel.
• Strong written, verbal, and presentation skills, including demonstrated ability to interact effectively with Senior Agency management and leadership.
• Strong stakeholder management and engagement skills with staff at all levels, including ability to collaborate with people of varied technical backgrounds and management levels.
• Advanced understanding of and experience with GRC tools, policy, procedures, and processes, including (but not limited to) FISMA audits and compliance, NIST, RMF, and recent Executive Orders.
• Experience with NIST Risk Management Framework and Governance, Risk & Compliance (GRC) and Information Assurance capabilities / tools.
• Strong familiarity with NIST Risk Management Framework at the subject matter expert level, particularly including SP 800-30, -37, -39, -137, -53, and -53A / B.
• Ability to guide the development of enterprise-specific implementation guidance for agency management.
• Ability to analyze and interpret Federal legislation, directives, Office of Management and Budget (OMB) mandates, and guidance provided by the National Institute of Standards and Technology (NIST) against existing information security and privacy policy to identify required updates.
• Ability to conduct research on new and emerging information technologies and develop comprehensive information security and privacy policy, standards / guidelines, and procedures to facilitate the implementation of information security and privacy controls. Must have working knowledge of the Privacy Act of 1974 (as amended), the Federal Information Security Modernization Act (FISMA).
• Manage the program team and oversee the development of Enterprise Information Security Trainings and Enterprise Outreach Campaign Plans.

Certifications / Licenses :

Additional Experience Preferred :

o Planning and overseeing cyber and information security policies, processes, and procedures management activities.

o Experience managing Security Controls Assessment teams.

o Experience overseeing the development and execution of security and privacy assessment plans in accordance with NIST SP 800-53A, as amended, requirements, for each security assessment project.

o Experience overseeing enterprise-scale standards, guidance, administration, templates, reports, processes and procedures, and leverage communication vehicles used by the key stakeholders.

Position Responsibilities :

o Participate in Daily, Weekly, and Monthly status meetings with key Government personnel, at times on short notice, to ensure stakeholders are informed of program status and progress on various cyber initiatives. Provide an opportunity to set priorities, identify opportunities or concerns, and coordinate resolution of identified problems.

o Develop program level security documentation, audit liaison activities, and compliance oversight activities to strengthen the security program and promote compliance with the Risk Management Framework (RMF).

o Support the performance of independent security and privacy control assessments in support of Security Assessment & Authorization (SA&A).

o Support the management and implementation of continuous monitoring solutions to increase the visibility and transparency of network activity.

Skills & Requirements Qualifications

NOTES :

Iron Vine Security is an equal opportunity employer. All qualified applicants are considered for employment without regard to race, color, age, religion, sex, sexual orientation, gender identity, national origin, disability, protected veteran status, or any other category protected by applicable federal, state or local laws.

Iron Vine Security is a federal contractor. As such, we are subject to an Executive Order requiring all employees of federal contractors to be fully vaccinated for COVID-19 by December 8, 2021. Therefore, by applying for this position, you understand that you will be required to verify that you have been, or will be, fully vaccinated by December 8, or to verify that you cannot be vaccinated due to a legally recognized exception to the vaccine mandate set forth in the Executive Order.

Note : An individual is not considered to be fully vaccinated until two weeks after receiving the second vaccine dosage in a vaccine regimen involving two vaccines.