Cybersecurity Reporting Lead

Evolver is a cybersecurity and digital transformation company supporting national defense, federal civilian agencies, and Fortune 500 organizations. We help customers secure critical systems, modernize enterprise technology, and solve complex operational challenges through integrated capabilities spanning cybersecurity, enterprise IT infrastructure, cloud, software development, data analytics, legal technology and eDiscovery, applied AI, and electronic security systems. Our teams combine deep technical expertise with mission understanding to deliver secure, reliable, and scalable solutions that advance performance in high-stakes environments.

 

Evolver is seeking a Cybersecurity Reporting Lead to support its Federal client in Springfield VA in managing, maturing and implementing automation in support of the client's FISMA reporting requirements. The Lead is responsible for leading a team in executing data analysis & reporting for Federal Client and across its component organization to meet FISMA requirements. The Lead will also provide input into the design and implementation of future state GRC tools.

The successful candidate will have over 10 years' experience leading teams in support of enterprise level Cybersecurity Risk Management and Compliance Programs for large federal agencies and be a "hands on" leader, actively participating in the work required to support client reporting and data needs. We are seeking a confident professional with a consulting background who has led process improvement initiatives leveraging automation and has experience in data analytics having leveraged Excel, Power BI, Tableau, and/or Splunk to develop and present data visualizations. Previous experience leading teams in executing Assessment and Authorization (A&A) processes, overseeing FISMA compliance, and supporting Federal clients in implementing the NIST Cybersecurity Framework (CSF) and NIST Risk management Framework (RMF) will be instrumental in achieving success.

Responsibilities

• Employ agile methodology(ies) to plan, organize, assigned, report on and lead work in support of the client's FISMA Metrics reporting requirements.
• Oversee the end-to-end lifecycle of FISMA metrics reporting, ensuring accuracy, timeliness, and alignment with OMB and DHS requirements.
• Lead and execute data extraction, transformation, and analysis tasks.
• Generate trend reports, scorecards, and executive summaries.
• Design and implement GRC solutions, including creation and management of supporting workflows.
• Provide input to client's automation strategy including recommendations on tools, process improvements, and integration projects to facilitate efficiencies.
• Lead cross-functional teams in the collection, validation, and analysis of cybersecurity performance data.
• Design and maintain dashboards and visualizations to communicate trends and compliance status to executive leadership.
• Translate complex cybersecurity data into actionable insights for decision-makers.
• Ensure alignment of reporting processes with evolving federal mandates.
• Provide strategic input and recommendations for improving data quality, automation, and reporting efficiencies.
• Serve as the primary liaison between CISOD and DHS components for FISMA metrics coordination.
• Conduct training sessions and develop documentation to support consistent reporting practices across teams.

Basic Qualifications

• Bachelor's degree in Computer Science or related field
• 10+ years of experience in cybersecurity, including at least four years of specialized experience involving continuous monitoring.
• 10+ years' experience with NIST 800-37, experience that can span across a subset, or all, of the steps within the Risk Management Framework.
• 8+ years' project management experience to include leading cross-functional teams to support mission needs.
• 8 years' experience assessing security controls in accordance with NIST 800-53 in/ in support of the Federal Government to include evaluating and validating security control implementation.
• 5+ years of with NIST SP 800-53, 800-37, DHS 4300A/B
• 5+ years of experience with FISMA metrics and security compliance
• 3 + years' leveraging Agile Methodology in managing projects.
• 3+ years' experience as an Information System Security Office (ISSO) in/ in support of the Federal government, developing and maintaining comprehensi