Cybersecurity Assessment and Authorization SME (DAAS API GW)

CYBERSECURITY ASSESSMENT AND AUTHORIZATION SUBJECT MATTER EXPERT (SME) Job Type: Proposal Future Job Opportunity Location: Fully Remote Who we are: Horizon Industries Limited (Horizon) is a dynamic IT and Management Consulting firm based in the Washington, DC area. Founded in 1996, Horizon Industries Limited (Horizon) has evolved into a company of highly qualified professionals that provides full-cycle IT consulting and Management support in both the private and public sectors. Horizon’s culture is based on our core values, and we PRIDE ourselves on a diverse, employee- and family-centric approach. Our ideal candidate will have the following expertise : Serves as a cybersecurity Subject Matter Expert (SME) with regards to Assessment and Authorization (A&A) of information systems and all associated cybersecurity policies and procedures. Performs a DOW cybersecurity process while either authorizing an information system or serving as a SME for an information system undergoing authorization. Possess an understanding of how the security controls identified in the NIST 800-53 apply to the process of assessing and authorizing a large organization’s IT infrastructure such as DLA’s, in which there is a compilation of large and small enclaves, AIS applications and outsourced IT processes. Determines the applicable severity value for an identified vulnerability (e.g., non-compliant security control), and determines the possible ramifications on the system’s current or future authorization. Briefs senior management on the progress or results of an information system undergoing the Risk Management Framework (RMF) process. Minimum Experience: Five (5) years of relevant Risk Management Framework (RMF), NIST, and A&A experience. Five (5) years of relevant DOW cybersecurity experience. Assessing security controls and conducting authorization reviews for large, complex organizations. General tenets supporting the overall DOW implementation of its authorization process, to include supporting cybersecurity policy, procedures, and processes. Knowledgeable in the cybersecurity of emerging technology areas such as Cloud and Industrial Control Systems (ICSs), warehouse execution systems and Operational Technology (OT) infrastructures. Experience in assessing security controls and conducting authorization reviews for large, complex organizations. Required Skills: Certification: CNDSP-Analyst certification or CSSP-Analyst certification. Investigative Requirement: Secret clearance 8570/8140: DoW Approved 8570 Baseline Certification: Category IAM Level III Computing Environment : AC & PHY SEC, CompTIA Security +, CE, CISSP, MCDST, MCITP EDST, MCITP EDA, MCITP SA, MCITP EA, MCM, MCA: MS Windows Server: Directory, Windows 10 , MCSA, MCSE within 3 months after onboarding start date. Remote Work Environment: This position is performed in a 100% remote, collaborative environment supporting government development activities. The employee will work closely with Task Order Project Manager, Requirements Analysts, Scrum Master, Developers, Testers, and Government stakeholders through virtual meetings and Agile ceremonies. Employees must maintain a secure remote workspace, use government-approved systems and security controls, and comply with all cybersecurity and data protection requirements, including Controlled Unclassified Information (CUI). Regular availability during standard business hours is required to support team collaboration, customer meetings, and project deliverables. Why you will succeed at Horizon: Horizon works at the forefront of new technologies and development practices and supports its employees in being trained and certified in the latest and greatest. As we continue to expand and grow the Horizon brand around the globe, we want to ensure that our team members are growing with us, as you are a vital part of our success story. This is a great opportunity for us to invest in our employees by supporting them with the right skills and tools to…