Perform security analysis of operational and development environments, threats, vulnerabilities and internal interfaces
Lead and implement the Assessment and Authorization (A&A) processes under the Risk Management Framework (RMF)
Facilitate development of Memorandums of Understanding (MOU), Interconnection Security Agreements (ISA), Risk Acknowledgement Letters (RAL)
Supervise configuration management of assigned systems; auditing systems to ensure security posture integrity
Lead staff with assessments and test/analysis data to document state of compliance with security requirements
Conduct risk assessments and investigations, implement appropriate risk mitigations, and coordinate incident response activities
Conduct periodic hardware/software inventory assessments
Serve as organization spokesperson on sophisticated projects and programs
Act as advisor to management and customers on sophisticated technical research studies
Collaborate with government customers, suppliers, and company personnel to implement protective mechanisms

Requirements

Currently hold certification in good standing to satisfy IAM Level III (CISSP, GSLC, or CISM)
5+ years of experience and/or education in IT, cybersecurity, or related fields
5+ years of experience with the Risk Management Framework (RMF), cybersecurity policies, and RMF implementation
5+ years of experience utilizing security relevant tools, systems, and applications in support of RMF
3+ years of experience with cybersecurity leadership overseeing programs and teams
3+ years of experience communicating complex technical risks, translating impact, and advising senior leaders

Benefits

Health insurance
Flexible spending accounts
Health savings accounts
Retirement savings plans
Life and disability insurance programs
Paid time off
Unpaid time away from work

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

security analysisrisk assessmentsconfiguration managementincident responsevulnerability assessmentcybersecurity policiesrisk mitigationcompliance documentationtechnical researchinventory assessments

Soft Skills

leadershipcommunicationcollaborationadvisory skillssupervisionproblem-solvinganalytical thinkinginterpersonal skillsproject managementstakeholder engagement

Certifications

CISSPGSLCCISM