Senior Cybersecurity & Financial Compliance SME

Position Overview

Serve as a senior cybersecurity and financial compliance Subject Matter Expert (SME) for the Vantage system, specializing in NIST SP 800-53 Rev. 5 security controls, DoD and Army cybersecurity requirements, Financial Management overlays, and Financial Improvement and Audit Readiness (FIAR) requirements. The role is responsible for architecting, enforcing, and sustaining audit compliance while independently identifying compliance gaps, designing solutions, and driving remediation to completion with limited direction.

Key Responsibilities

• Cybersecurity and Compliance
• Serve as a senior cybersecurity and financial compliance SME for the Vantage system, independently interpreting and applying NIST SP 800-53 Rev. 5, DoD and Army cybersecurity requirements, Financial Management overlays, and FIAR requirements.
• Assess the Vantage security and compliance posture by reviewing applicable controls, implementation evidence, processes, and system documentation.
• Identify control deficiencies and compliance gaps and develop actionable remediation strategies.
• Provide expert guidance on the implementation, inheritance, assessment, and continuous monitoring of NIST SP 800-53 Rev. 5 controls.
• Ensure technical and procedural controls are appropriately tailored to the Vantage environment and Financial Management mission.
• Governance and Documentation
• Develop, maintain, and continuously improve security policies, Standard Operating Procedures (SOPs), Tactics, Techniques, and Procedures (TTPs), control implementation guidance, and other governance documentation required to sustain cybersecurity and financial audit compliance.
• Author critical policy documents and TTPs required to support continuous compliance and audit readiness.
• Audit and Compliance Evidence
• Lead the development, collection, validation, and maintenance of security and financial audit evidence and compliance artifacts.
• Ensure documentation is complete, traceable, current, and capable of withstanding independent assessment and audit scrutiny.
• Support and defend the Vantage compliance posture during cybersecurity assessments, control validations, financial audits, FIAR activities, and other formal reviews.
• Respond to findings, coordinate corrective actions, and track remediation through closure.

Qualifications

• Education: Bachelor’s degree [Required]
• Experience: 10+ years of Cybersecurity / Risk Management Framework (RMF) experience [Required]
• Practical experience: with NIST SP 800-53 Rev. 5 security and privacy controls within DoD and Army operational environments [Required]
• Expertise: in Financial Management overlays and a detailed understanding of Financial Improvement and Audit Readiness (FIAR) mandates as applicable to enterprise software and data systems [Required]
• Robust experience: preparing and managing compliance artifacts and defending system posture during formal security assessments and financial audits [Required]
• Expert proficiency: with Enterprise Mission Assurance Support Services (eMASS), including System Registration, Control Tracking, Vulnerability Management, and Package Generation [Required]
• Writing skills: writing security policies, Standard Operating Procedures (SOPs), and TTPs tailored to the Vantage system [Required]
• Certifications: Certified Information Systems Security Professional (CISSP) [Required]
• Clearance: Active DoD Secret security clearance [Required]

Other Requirements

• Must be US-based [Required]
• Must be able to work West Coast hours [Required]
• Must be a self-starter with the ability to work autonomously with limited direction [Required]
• Must possess a high degree of self-reliance and be capable of identifying compliance gaps, designing solutions, and driving them to completion with minimal supervision while aligning with the broader mission [Required]