Cybersecurity SCRM SME III Task Lead

Cybersecurity SME/SCRM  SME III Task Lead

This position requires the ability to obtain a Public Trust

We are seeking a highly skilled and experienced Cybersecurity Subject Matter Expert (SME) and Supply Chain Risk Management (SCRM) Task Lead to provide high-level expertise in the analysis, design, integration, and implementation of complex cybersecurity solutions. The successful candidate will play a critical role in managing and governing the organization's cybersecurity SCRM program, proactively addressing supply chain risks in compliance with federal regulations. The SME will lead efforts in security risk assessments, documentation updates, and integration of supply chain risk concepts into the Information Security Continuous Monitoring (ISCM) program. Additionally, the SME will be responsible for driving the development of a Cyber Workforce Training, Education, and Awareness Program.

Please Note:  This position is for future needs. If you are interested in a future with Cherokee Federal, APPLY TODAY!  We are accepting applications.

Compensation & Benefits:

• Estimated Starting Salary Range for Cyber Security SME/SCRM SME III ask Lead: $160,000 to $167,000
• Pay commensurate with experience.
• Full time benefits include Medical, Dental, Vision, 401K and other possible benefits as provided. Benefits are subject to change with or without notice.

Cyber Security SME/SCRM  SME III Task Lead Responsibilities Include: 

• Serve as a subject matter expert in cybersecurity with a focus on supply chain risk management (SCRM), providing strategic guidance on complex cybersecurity challenges.
• Manage and govern the organization’s cybersecurity SCRM program, ensuring adherence to federal regulations and frameworks, including NIST SP 800-53 Rev. 5.
• Update and enhance existing SCRM procedures to incorporate current best practices and proactively manage supply chain risks from a cybersecurity perspective.
• Identify and prioritize supply chain vendors based on risk levels, with assessments tied to the services and products provided by third-party vendors.
• Conduct security risk assessments of third-party vendors, identifying gaps in compliance with security requirements and controls.
• Integrate security-related SCRM concepts into the organization's Information Security Continuous Monitoring (ISCM) efforts, particularly as part of the transition to NIST SP 800-53 Rev. 5.
• Address supply chain risks including untrustworthy suppliers, counterfeit insertion, tampering, unauthorized production, theft, malicious code, and poor manufacturing practices throughout the Software Development Life Cycle (SDLC).
• Support the implementation of OMB M-22-18 and integrate the Secure Software Development Framework into the SDLC and ISCM.
• Develop and establish a Cyber Workforce Training, Education, and Awareness Program, including the creation of certificate pathways and the definition of training requirements for key cybersecurity roles.
• Ensure accountability for cybersecurity training, including tracking and supporting employees in obtaining industry certifications and academic credentials.
• Provide support to the Information System Security Officer (ISSO) function, including developing strategies for centralizing the ISSO support function and assisting with the development of Authority to Operate (ATO) packages.
• Prepare and deliver senior management presentations, briefings, and reports as required.
• Performs other job-related duties as assigned

Cyber Security SME/SCRM  SME III Task Lead Experience, Education, Skills, Abilities requested: 

• Bachelor’s degree in Cybersecurity, Information Technology, or a related field.
• Minimum 8 years of experience in cybersecurity, including substantial experience with supply chain risk management (SCRM) and cybersecurity program management.
• Possesses IAT Level III certification (CISSP, CISM, or equivalent) or similar certifications in a relevant technical or management discipline.
• Expert knowledge of NIST SP 800-53 Rev. 5, supply chain cybersecurity, and risk management frameworks.
• Proven experience with Information Security Continuous Monitoring (ISCM) and supply chain security concepts.
• Experience supporting or leading the ISSO function, including ATO package development.
• Knowledge of federal regulations, including OMB M-22-18 and other supply chain risk management mandates.
• Strong ability to conduct security risk assessments and identify gaps in security requirements.
• Excellent communication skills, with the ability to prepare and deliver presentations to senior management.
• Demonstrated experience