• Serve as a cybersecurity Subject Matter Expert (SME) for the authorization of information systems and associated cybersecurity policies, procedures, and processes. • Apply in-depth knowledge of the DoD Risk Management Framework (RMF) and Authorization to Operate (ATO) processes. • Perform cybersecurity authorization activities or act as an SME supporting systems undergoing authorization. • Assess and evaluate security controls in accordance with NIST SP 800-53. • Analyze vulnerabilities, determine severity levels, and assess potential impacts on current or future system authorizations. • Support authorization efforts for large, complex IT environments consisting of multiple enclaves, AIS applications, and outsourced IT services (e.g., DLA-scale environments). • Brief senior leadership on authorization status, risks, findings, and recommendations. • Ensure compliance with applicable DoD cybersecurity policies and standards.