Apply fundamental cybersecurity principles and concepts for a large DoD IT program
Develop and implement a plan to achieve cybersecurity and RMF objectives across the lifecycle of the program, to include close coordination across program workstreams and Government stakeholders
Maintain cybersecurity implementation plans, milestones, schedules, and resourcing requirements across cross-functional teams
Apply NIST Risk Management Framework (RMF), NIST SP 800-53 controls, Assessment and Authorization processes for both on-prem and cloud-based systems, POA&M management, and System Security Plan development and maintenance
Work with senior members of the program and client organization to ensure that overall cybersecurity program and project direction, strategy and expectations are met
Understand of Governance Risk and Compliance (GRC) requirements, standards, and guidelines governing security within the Federal Government (e.g., NIST publications, FISMA, and OMB memoranda) and aligning IT with business objectives to effectively manage risk
Design and implement system security plans and policies, such as account management policies or auditing policies
Perform cybersecurity risk management, research and development, and leading practices
Gather and organize technical information about an organization's mission goals and needs, existing security products, and ongoing programs in cybersecurity
Develop strategies, roadmaps, assessments, and policies
Work with solution architects for security requirements on network architecture
Conduct and lead risk assessments and managing risks
Develop and implement cybersecurity policies and procedures

Requirements

Minimum TEN (10) years of experience in Cybersecurity
Experience applying fundamental cybersecurity principles and concepts to tasks and projects
Experience implementing multiple end-to-end packages using the Risk Management Framework (RMF)
Expert level experience with NIST 800-53 security controls
Cybersecurity certification - CISM, CISSP, or Security+
Demonstrated ability leading successful teams and working in challenging situations
Strong written and oral communication skills, and demonstrates leadership role with clients and fellow team members
Strong client leadership skills and ability to recognize opportunities for improvement to existing or future capabilities
Ability to lead teams to complete projects with attention to detail on tight timelines
Assures high quality work by taking advantage of learning opportunities and self-motivated
Must be able to OBTAIN and MAINTAIN a Federal or DoD "SECRET" security clearance; candidates must obtain approved adjudication of clearance prior to onboarding with Guidehouse
Candidates with an ACTIVE "SECRET" or higher-level clearance are preferred
Understanding of identity management and role-based access controls

Benefits

Medical, Rx, Dental & Vision Insurance
Personal and Family Sick Time & Company Paid Holidays
Position may be eligible for a discretionary variable incentive bonus
Parental Leave and Adoption Assistance
401(k) Retirement Plan
Basic Life & Supplemental Life
Health Savings Account, Dental/Vision & Dependent Care Flexible Spending Accounts
Short-Term & Long-Term Disability
Student Loan PayDown
Tuition Reimbursement, Personal Development & Learning Opportunities
Skills Development & Certifications
Employee Referral Program
Corporate Sponsored Events & Community Outreach
Emergency Back-Up Childcare Program
Mobility Stipend

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

cybersecurity principlesRisk Management Framework (RMF)NIST 800-53 security controlsAssessment and Authorization processesSystem Security Plan developmentcybersecurity risk managementaccount management policiesauditing policiestechnical information organizationnetwork architecture security requirements

Soft Skills

leadershipwritten communicationoral communicationclient leadershipattention to detailteam collaborationproblem-solvingself-motivationadaptabilitystrategic thinking

Certifications

CISMCISSPSecurity+