Jobs and Careers

Continuous Diagnostics and Mitigation (CDM) Team Lead - NIH

United States - RemoteRemotefull_timeVerifiedPosted 12 Oct 2025

About the role

Continuous Diagnostics and Mitigation (CDM) Team Lead

Overview

cFocus Software is seeking a Continuous Diagnostics and Mitigation (CDM) Team Lead to manage and oversee the implementation, operation, and continuous improvement of CDM capabilities for a federal agency. The CDM Team Lead will coordinate technical and operational activities to enhance the agency’s cybersecurity posture, ensure compliance with DHS CDM program requirements, and drive data-driven risk management across enterprise systems. This position requires significant experience supporting or leading CDM initiatives and the ability to manage cross-functional teams while maintaining alignment with federal cybersecurity policies and standards.

This is a full-time position that may require on-site support at federal agency locations in the Washington, D.C. metro area. Some telework flexibility may be available depending on mission requirements. Must be able to obtain and maintain a Public Trust or higher-level security clearance as required by the agency.

Responsibilities

The Continuous Diagnostics and Mitigation (CDM) Team Lead shall perform duties that include, but are not limited to:

Lead the planning, execution, and oversight of the agency’s CDM program implementation in alignment with DHS requirements.
Coordinate deployment of CDM tools and capabilities across asset management, identity and access management, network security, and data protection domains.
Manage a cross-functional team responsible for integrating CDM capabilities into existing cybersecurity and IT infrastructures.
Develop and maintain CDM dashboards, reports, and metrics to measure program effectiveness and compliance with federal mandates.
Collaborate with DHS, CISA, and agency stakeholders to ensure timely data submission, continuous monitoring, and accurate reporting.
Identify, track, and mitigate security risks through CDM data analytics and actionable intelligence.
Ensure CDM toolsets are configured and maintained to collect, correlate, and analyze asset, vulnerability, and event data.
Serve as the primary liaison between technical teams, program management, and federal leadership for CDM-related activities.
Oversee continuous improvement of CDM processes, including automation of data ingestion, normalization, and reporting workflows.
Ensure adherence to federal security frameworks such as FISMA, NIST SP 800-53, OMB M-21-31, and CISA guidance for CDM programs.
Prepare and deliver executive-level briefings, project status updates, and risk assessments for agency leadership and DHS representatives.
Provide mentoring, training, and performance oversight to CDM team members to ensure consistent quality and compliance.

Required Qualifications

Highly relevant expertise derived from working directly in support of an agency-level CDM program for at least 3 years, or leading the implementation of CDM program capabilities for 5 years.
CISSP certification.
Project Management Professional (PMP) certification.
Demonstrated ability to lead CDM program deployments across large, complex federal environments.
Experience managing CDM capabilities in coordination with DHS, CISA, or equivalent federal cybersecurity oversight entities.
Strong understanding of continuous monitoring, vulnerability management, and cybersecurity data analytics.
Experience managing cross-functional teams and third-party vendors to deliver CDM-related capabilities.
Excellent communication and leadership skills, including experience briefing executive and federal stakeholders.

Preferred Qualifications

Experience supporting DHS or other federal agencies in the implementation of CDM tools and capabilities.
Knowledge of CDM architecture components such as Agency-Wide Adaptive Risk Enumeration (AWARE) dashboards and CISA data exchange requirements.
Proficiency with CDM toolsets including Archer, Splunk, Tenable, ServiceNow, or equivalent platforms.
Experience with federal cybersecurity frameworks such as FISM