Manager, Federal Information Systems Safeguarding and Compliance

Company Description

Work with Us. Change the World.

At AECOM, we're delivering a better world. Whether improving your commute, keeping the lights on, providing access to clean water, or transforming skylines, our work helps people and communities thrive. We are the world's trusted infrastructure consulting firm, partnering with clients to solve the world’s most complex challenges and build legacies for future generations.

There has never been a better time to be at AECOM. With accelerating infrastructure investment worldwide, our services are in great demand. We invite you to bring your bold ideas and big dreams and become part of a global team of over 50,000 planners, designers, engineers, scientists, digital innovators, program and construction managers and other professionals delivering projects that create a positive and tangible impact around the world.

We're one global team driven by our common purpose to deliver a better world. Join us.

Job Description

AECOM is seeking a Temporary Manager, Federal Information Systems Safeguarding and Compliance. This role will serve as a member of the Federal Business Services team and will report to the Director of Federal Business Services Federal Information Safeguarding and Compliance. This position is temporary to cover work for a specific project and federal safeguarding compliance configurations. We anticipate this position will last for a period of 4 – 6 months. This will be a remote role and will be based out of Arlington, VA.

This role will be responsible for developing and supporting adherence to all aspects of a rigorous Secure Services compliance program as stipulated by DFARS, internal Cybersecurity Control Standards and associated NIST publications. This will include:

• Assisting the Director regarding IT and information system security issues by implementing common information system security practices, policies and technologies.
• Interfacing with multiple AECOM project teams and functional groups and provide support in developing proposals, responding to inquiries, define and deliver Secure Services as needed and provide direct support throughout the secure operation of federal projects.
• Being proficient in DFARS and Contractor Program Security functions, responsibilities, and disciplines that make up a strong Federal Security Program.

Additionally, the ideal candidate will be a cyber security generalist and will be experienced in providing guidance to both technical and operations delivery teams across all aspects of information security, ensuring adherence to federal regulations and best practices which promote secure and reliable delivery of mission critical services within a global enterprise.

Roles and Responsibilities

• Maintain operational security posture for programs and information systems
• Information safeguarding interface to AECOM project teams
• Participate in the system development lifecycle to ensure secure solutions are delivered
• Ensure system security measures comply with applicable government policies
• Provide configuration management and accurately assess the impact of modifications and vulnerabilities for each system
• Ensure proper measures are taken when a federal information security incident or vulnerability is discovered
• Assist IT in monitoring and resolving Plan of Action and Milestones (POA&M) to mitigate system vulnerabilities on assigned Information Systems
• Maintain thorough understanding of NIST 800-171 controls, as well as document implementation in the Systems Security Plan
• Conduct reviews and technical inspections to identify and mitigate potential security weaknesses and ensure that all security controls applied to a system are implemented and functional
• Maintains awareness of upcoming customer / government driven changes and challenges and suggests approaches to meet those challenges
• Ensure development and implementation of applicable Federal information security education, training, and awareness activities
• Responsible for both the technical practice and operational management of one large or multiple small to medium sized offices/operating units with moderate complexity
• Determines and executes the strategic direction of the office(s) to ensure financial profitability
• Works in conjunction with the district and/or regional management to ensure financial success of the offices within the district or operating unit

Tasks and objectives:

• Cloud services reduction- AWS
• Onboard business teams, oversee the contractor provisioning SSD workspaces
• Virtualize the SSD in Azure by working with project teams defining requirements, architecting and overseeing the delivery of assets, developing and updating project specific wor