FISMA SME

AGE Solutions is looking for a FISMA SME to join our team in support of an upcoming cybersecurity risk management and assessment program with our DoD customer. In this position, you will provide subject matter expertise and operations support for FISMA and cybersecurity compliance. You will support CISO operations by working closely with OCIO to gather, analyze, and report agency cybersecurity compliance data.

Individuals in this role must be available to work on-site at Ft. Meade, MD for the majority of the workweek.

Responsibilities Include:

• Apply knowledge of federal and DoD cybersecurity policies, RMF, and FISMA requirements to analyze cybersecurity data and support compliance efforts.
• Monitor changes in FISMA reporting requirements and tools, and communicate updates to the DISA CIO FISMA lead.
• Respond to cybersecurity-related inquiries and RFIs within one business day, providing technical and compliance input or coordinating responses.
• Collect, analyze, and interpret cybersecurity data to assess agency FISMA and policy compliance, including areas like asset inventory, system authorization, endpoint security, configuration, patching, and cyber training.
• Prepare and deliver weekly internal scorecard briefs; support development of an automated compliance dashboard.
• Coordinate with DISA PMs to integrate 8140 compliance, STIG, IAVM, and PKI data into scorecard briefs.
• Collaborate with stakeholders to address compliance issues, offer guidance, and recommend solutions to resolve system or network-level concerns.
• Report cybersecurity issues affecting posture or reporting to the FISMA Government lead.
• Participate in weekly FISMA meetings, bi-weekly CIO staff meetings, and Pre-CISO working groups; provide updates, briefings, and capture action items relevant to DISA compliance.

Requirements:

• Bachelor's degree (IT-related field preferred)
• Ten (10) years of relevant experience in a cybersecurity or information assurance roles with at least three (3) years directly supporting FISMA compliance, security controls, or federal reporting initiatives
• Have an active DoD Secret clearance
• DoD 8570 IAM/IA Technical (IAT) Level III certification
• Deep understanding of FISMA (Federal Information Security Modernization Act) requirements
• Deep understanding of NIST Cybersecurity Frameworks, especially SP 800-53, 800-37, 800-137, and 800-171
• Experience supporting FISMA scorecard metrics, Agency-level compliance tracking, and Inspector General (IG) audits
• Proficiency with compliance dashboards, data visualization tools, or enterprise reporting systems
• Demonstrated ability to develop and maintain cybersecurity compliance documentation
• Demonstrated ability to prepare and deliver FISMA reports, internal scorecards, and briefings to stakeholders
• Excellent written and verbal communication for technical documentation and stakeholder engagement

Compensation: $160,000 - $170,000