What are the responsibilities and job description for the Subject Matter Expert (SME) Cybersecurity Consultant – Control Testing Featured Charlotte, NC position at Kaizen Lab Inc.?
Position Summary
The SME Cybersecurity Consultant will play a critical role in conducting, guiding, and validating control testing efforts for federal and critical industry clients. This individual will leverage 10 years of experience in cybersecurity, with a focus on compliance, control assessments, and risk management. The ideal candidate will be a recognized expert in NIST 800-53, NIST 800-37, and FISMA, with strong analytical and communication skills to support high-profile engagements.
Take the next step in your career now, scroll down to read the full role description and make your application.
Key Responsibilities
- Lead and perform comprehensive cybersecurity control assessments in accordance with NIST 800-53 v5 , NIST 800-37 , and FISMA requirements .
- Serve as the subject matter expert (SME) for control testing methodologies, providing guidance and mentorship to assessment teams.
- Review and validate control implementation and effectiveness, ensuring compliance with federal regulations and organizational policies.
- Develop and deliver key artifacts, including System Security Plans (SSPs), Security Assessment Reports (SARs), and Plan of Action and Milestones (POA&Ms).
- Analyze security documentation, configurations, and evidence to assess compliance with security and privacy controls.
- Collaborate with cross-functional teams, including IT, security, and audit teams, to identify, document, and mitigate risks.
- Provide technical expertise in the implementation of the Risk Management Framework (RMF) process, supporting system authorization and accreditation.
- Assist in the preparation for audits, inspections, and other regulatory assessments, ensuring successful outcomes.
- Stay informed about evolving federal cybersecurity regulations, standards, and threats to provide proactive recommendations.
- Communicate assessment findings and recommendations effectively to both technical and non-technical stakeholders, including senior leadership and government clients.
Qualifications
Required Experience and Skills :
Preferred Qualifications :
J-18808-Ljbffr