Cybersecurity Assessment and Authorization SME (DAAS API GW)

CYBERSECURITY ASSESSMENT AND AUTHORIZATION SUBJECT MATTER EXPERT (SME)

Job Type: Proposal Future Job Opportunity

Location: Fully Remote

Who we are

Horizon Industries Limited (Horizon) is a dynamic IT and Management Consulting firm based in the Washington, DC area. Founded in 1996, Horizon Industries Limited (Horizon) has evolved into a company of highly qualified professionals that provides full-cycle IT consulting and Management support in both the private and public sectors.

Horizon's culture is based on our core values, and we PRIDE ourselves on a diverse, employee- and family-centric approach.

Our ideal candidate will have the following expertise

Serves as a cybersecurity Subject Matter Expert (SME) with regards to Assessment and Authorization (A&A) of information systems and all associated cybersecurity policies and procedures. Performs a DOW cybersecurity process while either authorizing an information system or serving as a SME for an information system undergoing authorization. Possess an understanding of how the security controls identified in the NIST 800-53 apply to the process of assessing and authorizing a large organization's IT infrastructure such as DLA's, in which there is a compilation of large and small enclaves, AIS applications and outsourced IT processes. Determines the applicable severity value for an identified vulnerability (e.g., non-compliant security control), and determines the possible ramifications on the system's current or future authorization. Briefs senior management on the progress or results of an information system undergoing the Risk Management Framework (RMF) process.

Minimum Experience

• Five (5) years of relevant Risk Management Framework (RMF), NIST, and A&A experience.
• Five (5) years of relevant DOW cybersecurity experience.
• Assessing security controls and conducting authorization reviews for large, complex organizations.
• General tenets supporting the