Cybersecurity Subject Matter Expert (SME)
On-site · Washington, District of Columbia, United States
Job Summary
Cybersecurity Subject Matter Expert (SME) to support Department of Commerce (DOC) and Bureau of Industry and Security (BIS) cybersecurity initiatives focused on supply chain risk management, system security compliance, and risk mitigation. Responsibilities include applying cybersecurity principles to support complex technical requirements, planning and reviewing key cybersecurity program deliverables for DOC/BIS environments, supporting compliance efforts with FISMA, NIST, OMB, and other Federal standards, conducting interviews with technical, administrative, and executive personnel, collaborating to develop security documentation (security categorizations, risk assessments, contingency plans, security test and evaluation reports, vulnerability assessment reports), mapping technical requirements to prescribed controls, and presenting cybersecurity findings to internal and external stakeholders. Minimum qualifications include an MS/MA degree with related certifications, 8+ years of experience in Federal cybersecurity programs, and strong communication skills. Preferred qualifications include relevant certifications (CISSP, CISM, Security+), DOC/BIS program experience, CATTS familiarity, and experience with Federal compliance audits. Travel is 0–10%, on-site in Washington, DC, with a Secret clearance requirement.
Required Qualifications
- Minimum MS/MA degree and related industry certifications
- Minimum 8 years of experience in similar position
- Demonstrated experience supporting Federal cybersecurity programs and risk management initiatives
- Strong understanding of FISMA, NIST, OMB, and Federal cybersecurity compliance requirements
- Experience developing cybersecurity documentation, assessments, and security control mappings
- Knowledge of supply chain risk management principles and cybersecurity best practices
- Experience conducting vulnerability assessments, risk assessments, and security testing activities
- Strong analytical and problem-solving skills with the ability to communicate technical findings to diverse audiences
- Ability to work collaboratively with technical, administrative, and executive stakeholders
- Excellent written and verbal communication skills
- Ability to manage multiple priorities in fast-paced Federal environments
- Preferred: CISSP, CISM, Security+ or equivalent
- Experience with DOC or BIS programs
- Familiarity with CATTS labor categories and Federal contract proposal environments
- Experience with supply chain cybersecurity assessments and Federal compliance audits
Apply with one swipe on Sorce. We auto-fill applications and apply on your behalf — no cover letters, no 40-minute forms.
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.