Lead implementation and sustainment of DFARS/NIST SP 800-171 and Cybersecurity Maturity Model Certification (CMMC) controls for systems handling Controlled Unclassified Information (CUI)
Ensure continuous compliance, risk management, and overall program management of a large portfolio of systems
Develop and maintain security documentation (including System Security Plans and POA&Ms)
Coordinate audits and remediation with program stakeholders and assessors
Drive ongoing monitoring to protect CUI in accordance with DFARS 252.204-7012 and CMMC requirements
Leads a team of ISSOs performing cybersecurity governance work on CUI, DFARS, and CMMC systems
Perform security analysis of operational and development environments, threats, vulnerabilities and internal interfaces to define and assess compliance with accepted industry and government standards
Oversee configuration management of assigned systems; auditing systems to ensure security posture integrity
Conduct risk assessments and investigations, execute appropriate risk mitigations, and oversee incident response activities
Conduct periodic hardware/software inventory assessments

Requirements

Currently hold certification in good standing to satisfy IAM Level III (CISSP, GSLC, or CISM)
5+ years of experience with cyber security policies and implementation of Risk Management Framework (RMF): e.g. DAAPM, CNSSI 1253, ICD-503, JSIG, or NIST SP 800 series
3+ years of experience implementing and sustaining Defense Federal Acquisition Regulation Supplement (DFARS) 252.204-7012/National Institute of Standards and Technology (NIST) SP 800-171 controls and mapping to Cybersecurity Maturity Model Certification (CMMC) requirements

Benefits

health insurance
flexible spending accounts
health savings accounts
retirement savings plans
life and disability insurance programs
a number of programs that provide for both paid and unpaid time away from work

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

cybersecurity governancerisk managementsecurity analysisconfiguration managementincident responserisk assessmentssecurity documentationaudit coordinationvulnerability assessmentcompliance monitoring

Soft Skills

leadershipteam managementcommunicationorganizational skillsstakeholder coordination

Certifications

CISSPGSLCCISM