Cybersecurity Assessment and Authorization, Subject Matter Expert

Enterprise Horizon Consulting Group

Cybersecurity SME supporting the full lifecycle of authorization activities for complex information systems. Driving compliance with DoD and NIST requirements in diverse IT environments.

Posted 6/17/2026contractRemote • Virginia • 🇺🇸 United StatesMid-LevelSeniorWebsite

Tech Stack

Tools & technologies

CloudCyber SecurityIoT

About the role

Key responsibilities & impact

Serve as the cybersecurity SME for all Assessment and Authorization (A&A) activities, ensuring compliance with DoD and NIST requirements.
Perform RMF activities for systems undergoing authorization, including control assessment, documentation review, and risk analysis.
Apply expert understanding of NIST SP 800‑53 security controls and their relevance to large, complex IT infrastructures composed of multiple enclaves, applications, and outsourced services.
Identify vulnerabilities, determine severity levels, and assess potential impacts on system authorization status.
Conduct comprehensive authorization reviews for enterprise‑level systems and environments.
Brief senior leadership on RMF progress, findings, risks, and recommended courses of action.
Support the development, implementation, and refinement of cybersecurity policies, procedures, and processes aligned with DoD requirements.
Apply cybersecurity expertise to emerging technologies, including cloud services, Industrial Control Systems (ICS), warehouse execution systems, and Operational Technology (OT).
Evaluate and apply cybersecurity controls for modern computing environments such as hybrid cloud, edge computing, and IoT-related architectures.

Requirements

What you’ll need

Must have an active Secret clearance.
Minimum five (5) years of relevant Risk Management Framework (RMF) and NIST Assessment & Authorization (A&A) experience.
DoD cybersecurity experience supporting enterprise‑level systems.
Demonstrated experience assessing security controls and conducting authorization reviews for large, complex organizations.
Strong understanding of DoD cybersecurity policies, procedures, and the DoD authorization process.
Knowledge of cybersecurity considerations for emerging technologies, including Cloud, ICS, OT, and related systems.

Benefits

Comp & perks

Medical, Dental, & Vision
Life Insurance, Short-term Disability, Long-term Disability
SIMPLE IRA with Company Match
Federal Holidays
Vacation & Sick Leave
$500 Referral Bonus

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

Risk Management Framework (RMF)NIST SP 800-53security controls assessmentrisk analysisvulnerability assessmentauthorization reviewscybersecurity policy developmentcloud servicesIndustrial Control Systems (ICS)Operational Technology (OT)

Soft Skills

communicationleadershiporganizational skills

Certifications

Secret clearance