Cybersecurity Assessment and Authorization Subject Matter Expert

Serves as a with regards to Assessment and Authorization (A&A) of information systems and all associated cybersecurity policies and procedures.



Responsibilities:

• Executes DoW/DLA cybersecurity processes to authorize information systems, maintain authorization of information systems, or serves as a Subject Matter Expert (SME) for systems undergoing the authorization process.
• Determines the residual risk of an identified vulnerability (e.g., non-compliant security control) and determines the possible ramifications on the system's current or future authorization.
• Briefs senior management on the progress or results of an information system undergoing the Risk Management Framework (RMF) process.
• Thinks independently and demonstrates exceptional written and oral communications skills.
• Applies advanced technical principles, theories, and concepts.
• Contributes to the development of new principles, concepts, and methodologies.
• Works on unusually complex technical problems and provides highly innovative and ingenious solutions.

Qualifications:

• Years of Experience: Five (5) years of relevant C&A experience; Risk Management Framework (RMF) and NIST C&A experience; DOD cybersecurity experience
• Experience in assessing security controls and conducting authorization reviews for large, complex organizations
• Clearance Requirements: Secret (Must possess a Moderate Risk, Non-Critical Sensitive, Tier 3 (T3)/NACLC/ANACI)
• Certification Requirements:
  • ICS300 or relevant Operational Technology "OT" or Industrial Control System "ICS" Cybersecurity Certifications
  • Current Requirement: DOD 8570 - IAM Level III
• Any other work-related qualifications needed for the role:
  • Demonstrated expertise in leading and mentoring teams, providing clear guidance, quality oversight, and technical direction to ensure all cybersecurity artifacts meet DoD standards, organizational expectations, and inspection-ready quality levels.
  • SME level experience in assessing security controls and conducting authorization reviews for large, complex organizations.

Diné Development Corporation (DDC) is a Navajo Nation-owned family of companies that provides government agencies and commercial organizations with high-quality IT, professional, environmental, and research and development services. DDC is dedicated to empowering the Navajo Nation and the communities we serve.



Eligible full-time employees receive a comprehensive benefits package, including medical, dental, vision, life and disability coverage, retirement savings with company match, and paid time off. Additional benefits include voluntary supplemental benefits, access to an employee assistance program, and educational assistance with tuition reimbursement.



This contractor and subcontractor shall abide by the requirements of 41 CFR 60-1.4(a), 60-300.5(a), and 60-741.5(a). These regulations prohibit discrimination against qualified individuals based on their status as protected veterans or individuals with disabilities, and prohibit discrimination against all individuals based on their race, color, religion, sex, sexual orientation, gender identity, national origin, or for inquiring about, discussing, or disclosing information about compensation, or any other basis prohibited by law.

We participate in E-Verify.

DDC is committed to providing equal employment opportunities to all applicants and employees. If you require a reasonable accommodation to participate in the application or interview process, please contact Recruiting for assistance recruiting@ddc-dine.com