Cybersecurity Strategy & Operations Lead

Job Family:

Cyber Consulting

Travel Required:

Up to 10%

Clearance Required:

Active Secret

What You Will Do:
 

The Cybersecurity Strategy & Operations Lead will work directly with the client’s CIO office leadership to support modernizing their Cybersecurity program. This role will be focused on strategy through implementation of cyber governance programs; it is both strategic and operational in nature. This role will coordinate with project-implementing teams and support oversight of cybersecurity investments for the client’s leadership, advise CIO office leadership on IT investments, and provide recommendations to leadership on Cybersecurity initiatives including Executive Order compliance and incident response. In addition, the role will be responsible for providing systems security support for Secret information systems for our federal client to achieve and maintain active ATO statuses for multiple systems and applications.

Duties will include:

• Provide strategic and operational recommendations to leadership on Cybersecurity initiatives including governance, compliance, and cybersecurity operational efficiency.

• Assist with developing briefing materials and executive level presentations to support project status briefings.

• Provide input for/manage cybersecurity performance metrics.

• Reviewing and updating RMF ATO packages, policy and procedure documents, and related artifacts in accordance with applicable standards and regulations.

• Requesting, obtaining, reviewing, and analyzing a variety of artifacts to assist in executing security and privacy control testing such as policies, plans, SOPs, system screenshots, and system configuration settings.

• Scoping and tailoring security and privacy control baselines based on system missions and categorizations.

• Preparing and updating security documentation and working with technical teams to support the creation and maintenance of technical documentation.

• Performing rigorous evaluations of NIST SP 800-53 security and privacy controls using NIST SP 800-53A standards.

• Performing walkthrough interviews and maintaining communication with a variety of client stakeholders, including system technical personnel such as network engineers and system administrators.

• Evaluating the design and operating effectiveness of security and privacy controls using provided artifacts, industry-standard guidance, leading practices, and professional judgement.

• Testing and documenting the results of security and privacy controls test work in a consistent and high-quality manner.

• Analyzing, summarizing, and communicating security and privacy control assessment results to a variety of client stakeholders, including senior leadership. 

• Developing and maintaining Plans of Action and Milestones to capture identified security and privacy control shortfalls and facilitate correction.

• Facilitating third-party security assessment activities, including direct interactions with third party security assessors.

What You Will Need:

• An ACTIVE and MAINTAINED SECRET Federal or DoD security clearance

• Bachelor’s degree

• SIX (6) years of experience related to Cybersecurity or Project/Program Management or Communications or IT Security or Technology Consultant

What Would Be Nice To Have:

• Master’s Degree

• Experience working within a PMO team and leading people.

• Understanding of the NIST Risk Management Framework and/or the Authorization to Operate (ATO) process.

• Experience conducting HVA assessments or performing Risk and Vulnerability Assessments.

• Excellent oral and written communication and presentation skills.

• Experience managing direct client engagement team to deliver impactful support to Federal clients.

• Experience developing and maintaining working relationships while serving Federal clients onsite.

• Ability to identify obstacles and opportunities that impact the success of plans or initiatives.

• Strong Microsoft Office skills (e.g., Excel, Word, PowerPoint)

• U.S. Department of State experience a plus

• PMP or similar certification

The annual salary range for this position is $125,600.00-$188,400.00. Compensation decisions depend on a wide range of factors, including but not limited to skill sets, experience and training, security clearances, licensure and certifications, and other business and organizational needs.

What We Offer