Cyber SME Woodlawn MD ONSITE

TechPerm Incorporated is looking for a subject matter expert in cyber risk management as it pertains to Digital Identity. The Digital Identity (DI) Program at our customer oversees risk-based identity proofing, authentication, authorization, and federation efforts for public-facing applications.
The candidate will be part of a team that will strengthen our customer’s digital identity program and risk management posture by developing risk management procedures, preparing documentation, performing assessments, and performing evaluations of customers risk management processes for digital identity in a manner consistent with modern risk management practice.
TechPerm Incorporated partnered with a growing WOSB based in Baltimore, Maryland that provides cybersecurity, digital identity, and zero trust advisory services to federal and commercial clients. We offer a competitive salary and benefits package and are committed to prioritizing your professional development and work-life balance!
This can be a fully remote position, or work can take place on location or in offices in Woodlawn or Baltimore, MD.
Requirements
Over 7 years of experience helping federal agencies comply with agency risk management programs, modern digital identity management practices, the NIST Risk Management Framework, and other related federal regulations, policies, and guidelines.
Must have experience with Digital Identity regulations, policies, and guidelines issued by Executive Orders of the White House, the Office of Management and Budget (OMB), and the National Institute of Standards and Technology (NIST). The candidate should have experience implementing the NIST risk management framework (RMF) as described in NIST SP 800-37, the NIST SP 800-63-3 Digital Identity Guidelines, and must have an in-depth understanding of NIST SP 800-53. An in-depth understanding of Identity Proofing, Identity Risk Classification, Assurance Levels, and Digital Identity Risk Assessments is required.
Knowledge of relevant Federal regulations is also required, including the Federal Information Security Management Act of 2002 (FISMA), Federal Risk and Authorization Management Program (FedRAMP), and the Health Insurance Portability and Accountability Act (HIPAA).
The applicant must possess excellent oral and written communication skills and be able to conduct stakeholder meetings independently.
The applicant must also have:
• The ability to independently author required risk management and compliance artifacts/documentation with feedback from stakeholders with minimal oversight.
• The ability to assess requests, gather requirements, and communicate with customers, subject matter experts, and various agency stakeholders. Experience in eliciting, documenting, and evaluating feedback from government stakeholders in forums such as user interviews, discovery sessions, and workgroups relating to digital identity policies, risks, and products.
• Experience developing artifacts for managing digital identity risks and advising clients on matters involving the assessment and control of digital identity risks.
• Experience preparing program artifacts and documentation, including documentation of program decisions.
• Experience developing and monitoring key performance indicators (KPIs) and program health metrics.
• Experience conducting analyses to evaluate programmatic options and formulate recommendations.
• Experience developing strategic communications materials, including presentations and correspondence, for high-level briefings to executive and external audiences.
• Experience participating in planning, analysis, and project support efforts.
• Experience evaluating market solutions and capabilities to support digital identity business objectives.
• Strong critical thinking and analytical skills.
• A bachelor’s degree or higher
• Must be a US Citizen or Lawful Permanent Resident (LPR)
Preferred Experience:
Risk Management experience surrounding the use of federated credentials such as Login.gov or ID.me.
A technical degree or relevant certification, such as a CISSP.