IT/Cyber Governance and Support SME
Core
Establish and oversee IT and cybersecurity governance policies, instructions, and standard operating procedures for weapon systems and RDT&E programs.
Role type
Senior IT/Cyber Governance and Support SME
Builds
Executive cybersecurity performance metrics, risk indices, compliance indicators, and strategic white papers for senior military and government leaders.
Domain
Defense acquisition, RDT&E, missile defense systems
Required skills
IT and cybersecurity governance, RMF authorization package evaluation, Zero Trust maturity assessments, SAFe governance, executive metric development, risk index calculation, NIST control family compliance, PMP principles integration, multidisciplinary team leadership, technical policy conflict resolution
Preferred skills
SAP eligibility
Technologies
SAP
Responsibilities
Establish and oversee IT and cybersecurity governance policies, instructions, and standard operating procedures for weapon systems and RDT&E programs; Independently evaluate and synthesize RMF authorization packages, Zero Trust maturity assessments, and engineering change evaluations; Develop and oversee executive cybersecurity performance metrics, risk indices, and compliance indicators across RMF, Zero Trust pillars, and NIST control families; Compare program cybersecurity posture with acquisition milestones, configuration management baselines, and statutory directives, advising government leaders on authorization and risk acceptance; Integrate program management rigor and PMP principles into SAFe environments while maintaining governance oversight, validated metrics, and risk visibility across sprint cycles; Prepare and deliver executive-level metric briefings, risk positions, and strategic white papers to senior military and government leaders, program executives, and Authorizing Officials; Lead governance working groups, Architecture Review Boards, and risk adjudication forums, resolving technical policy conflicts across organizations; Act as the principal governance liaison to external oversight bodies and align multi-agency compliance objectives; Direct multidisciplinary advisory teams, set analytical quality standards for artifact reviews, and mentor SME I and SME II personnel
