DoD Cybersecurity Planning and Strategy SME

Position Title: Subject Matter Expert (SME) – DoD Cybersecurity Planning and Strategy

Role Summary:
The SME will provide advanced expertise in cybersecurity policy development, strategy implementation, risk management, and technical analysis to support the Department of Defense (DoD) Chief Information Officer (CIO) Cybersecurity mission. This role demands extensive knowledge in cybersecurity frameworks, governance models, and emerging technologies, ensuring alignment with DoD strategic objectives.

Key Responsibilities:

• Policy and Strategy Development:
  • Lead the development and implementation of cybersecurity policies, manuals, and strategies in alignment with DoD priorities and mission-critical objectives.
  • Provide expertise in integrating governance models, leveraging frameworks such as NIST RMF, FedRAMP, and DoD-specific standards.
  • Support the migration from DIACAP to RMF, advising on best practices and optimized processes.
• Risk Management and Analysis:
  • Conduct comprehensive risk assessments and gap analyses for cybersecurity initiatives across the DoD enterprise.
  • Deliver actionable recommendations for mitigating identified risks and improving cybersecurity posture.
  • Support oversight of cybersecurity compliance and verification programs.
• Portfolio Management and Technology Alignment:
  • Execute Analysis of Alternatives (AoA) to ensure alignment of cybersecurity technologies with operational needs.
  • Leverage advanced tools and frameworks, such as AWS Cloud and AFrame, for data management, decision-making, and program evaluation.
  • Develop and maintain capability deployment plans, including roadmaps and performance metrics.
• Data-Driven Insights and AI Governance:
  • Integrate AI-driven methodologies for data quality management, compliance tracking, and risk scoring.
  • Provide innovative solutions for continuous monitoring and decision support, enhancing situational awareness for DoD leadership.
• Client Engagement and Technical Leadership:
  • Advise DoD senior leaders on policy development, technology strategy, and risk prioritization.
  • Prepare detailed reports, white papers, and presentations for program reviews, Congressional justifications, and leadership briefings.
  • Conduct technical evaluations of emerging technologies, including cloud security, IoT, and supply chain risk management.

Qualifications:

• Education:
  • Master’s degree in Cybersecurity, Computer Science, Information Technology, or a related field. 
  • Relevant certifications (e.g., CISSP, CISM, AWS Certified Solutions Architect, or similar) are highly desirable.
• Experience:
  • 10 years of relevant experience.
• Technical Skills:
  • Proficiency in cybersecurity frameworks and tools, including NIST RMF, DISA STIGs, and AWS GovCloud.
  • Expertise in AI governance, data analytics, and portfolio management.
  • Strong written and verbal communication skills, with experience delivering executive-level briefings.
• Clearance:
  • Active Top Secret clearance with SCI eligibility is required.

Key Competencies:

• Exceptional analytical skills with the ability to synthesize complex data into actionable strategies.
• Proven track record of delivering innovative solutions to support DoD cybersecurity missions.
• Collaborative leadership with experience managing cross-functional teams in high-stakes environments.