Cybersecurity Policy Subject Matter Expert (SME)

Cybersecurity Policy Subject Matter Expert (SME) Fully Remote | Full-time MBL Technologies is seeking a Cybersecurity Policy Subject Matter Expert (SME) who will track changes and updates coming out of National Institute of Standards and Technology (NIST), Office of Management and Budget (OMB), Department of Health and Human Services (HHS), and other federal sources, and translate those into agency‑specific policy and guidance. The SME will develop implementation plans for rolling out new and updated policies across stakeholders and serve as a go‑to resource on cybersecurity policy questions and guidance. Key Responsibilities Track and analyze cybersecurity policy updates and directives from NIST, OMB, HHS, Cybersecurity and Infrastructure Security Agency (CISA), and other sources. Lead the review and update of agency cybersecurity policies. Perform gap analyses between current policies and new/revised federal requirements and develop remediation recommendations. Develop implementation plans and rollout strategies for new or updated policies. Draft policy memos, white papers, and briefings for both technical and non‑technical audiences. Support the development of security control overlays and tailored baselines aligned with the NIST RMF. Advise agency leadership and program offices on cybersecurity policy interpretation and compliance. Assist with the Federal Information Security Modernization Act (FISMA) reporting and audit support related to policy compliance. Participate in working groups, policy review boards, and governance meetings. Develop briefings and status updates on cybersecurity policy trends and contractor. Required Experience, Skills & Qualifications 10 years of cybersecurity policy development experience in a federal setting. Experience reviewing and writing enterprise‑level security policies for a federal agency. Working knowledge of the NIST SP 800 series (especially 800‑53 Rev. 5 and 800‑37). Experience with FISMA compliance, continuous monitoring, and Security Assessment and Authorization (SA&A) processes. Familiarity with Executive Orders, OMB Memoranda (e.g., M‑22‑09 Zero Trust), and CISA Binding Operational Directives. Strong writing and editing skills; ability to take complex policy concepts and put them into plain language. Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), or CompTIA Cybersecurity Analyst (CySA+) (highly desired). Public Trust Clearance or the ability to obtain a clearance. Benefits Robust benefits package (medical, dental, vision, STD, Accident, Life, Hospital Insurance, FSA, HSA, 401K match, professional development stipend, etc.). MBL Technologies offers a competitive salary adjusted for candidate qualifications partnered with an industry‑leading benefits package. This package includes incentive plans with corporate and individual‑based performance bonuses, 401K, PTO, remote work, health and wellness programs, employee discounts, and learning and development reimbursement. EEO Statement MBL Technologies is an Equal Opportunity Employer. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability, or protected veteran status. #J-18808-Ljbffr MBL Technologies