Apply on Employer Site

Chevo · 3 weeks ago

Subject Matter Expert-Program Protection Cybersecurity

Washington,DC,US

Full-time

Onsite

Senior Level, Lead/Staff

$120K/yr - $150K/yr

15+ years exp

Chevo LLC is currently hiring a Subject Matter Expert in Program Protection/Cybersecurity to join their U.S. Coast Guard Office of Acquisition Support and Systems Engineering Policy team. This role involves providing expertise in cybersecurity and program protection, ensuring compliance with DHS and DoD policies, and supporting the development of acquisition policies and documents.

Management Consulting

Growth Opportunities

No H1B

Security Clearance Required

U.S. Citizen Only

Responsibilities

Provide subject matter expertise in the development and management of USCG acquisition policy for Cybersecurity / Program Protection in support of all CG Level 1, 2, and 3 acquisitions, including advisory support to USCG personnel, offering expert recommendations and insights regarding Cybersecurity / Program Protection policies and practices

Assist in drafting, reviewing, and updating relevant policy documents, guidelines, and templates to ensure alignment with current DHS and DoD Cybersecurity policies

Engage with stakeholders through meetings and consultations to gather information, discuss cybersecurity concerns, and propose actionable solutions

Support the integration of Cybersecurity / Program Protection into the Systems Engineering Lifecycle (SELC) and Risk Management Framework, ensuring compliance with NIST Special Publications 800-160 and 800-37

Define Cybersecurity/Program Protection stakeholder objectives, needs and concerns, security requirements, and associated validation methods

Develop processes to conduct Critical Program Information (CPI) analysis and Criticality Analysis (CA) to identify CPI, Critical Functions (CF), and Critical Components (CC) as part of developing a comprehensive Program Protection Plan (PPP)

Identify, quantify, and evaluate the costs/benefits of security functions and considerations to inform analysis of alternatives, engineering trade-offs, and risk management

Review and provide actionable feedback for Cybersecurity / Program Protection related acquisition program documents including the USCG Acquisition Cybersecurity Strategy (ACSP), Program Protection Plan (PPP), Risk Assessment Report (RAR), Cybersecurity Risk Recommendation Memo (CRRM), and USCG Cybersecurity Manual (COMDTINST 5500.13 series)

Qualification

Cybersecurity expertiseProgram Protection experienceNIST 800-160 knowledgeNIST 800-37 knowledgeRisk Management FrameworkCPI analysis experienceCISSP certificationDoD 8570/8140 IAM Level IIIMicrosoft Office proficiencyCommunication skills

Required

Bachelor's degree in cybersecurity, information security, information assurance, computer science (with cybersecurity concentration), systems engineering (with cybersecurity/information assurance focus) or similar fields

Current Secret Clearance or ability to obtain one

15+ years of relevant Cybersecurity and Program Protection experience

Proficiency with Microsoft Office suite

Strong oral and written communication skills and the ability to present a polished and professional image to clients

Deep knowledge of NIST Special Publications 800-160 and 800-37, Systems Engineering Lifecycle (SELC), and Risk Management Framework

Understanding of the 2017 Memorandum of Agreement between DHS and DoD regarding Cybersecurity and System Security Engineering policies

Experience developing security requirements and conducting Critical Program Information (CPI) analysis

Ability to produce comprehensive written products including policy documents, guidelines, and technical reports

Preferred

Master's degree cybersecurity, information security, information assurance, computer science (with cybersecurity concentration), systems engineering (with cybersecurity/information assurance focus) or similar fields

Certified Information Systems Security Professional (CISSP) - Industry standard or Certified Authorization Professional (CAP) - Directly relevant to Risk Management Framework or DoD 8570/8140 IAM Level III or IASAE Level III

Active DHS/USCG Entry of Delivery (EOD) clearance

Experience with DHS Cybersecurity Through the Acquisition Lifecycle Framework (DHS Instruction 102-01-012) and DoD Risk Management Framework for DoD Information Technology (DoD Instruction 8510.01)

Demonstrated ability to conduct research on cybersecurity policy and DHS/USCG mission-related topics