Cybersecurity Lead – ISSM Support

🕒 Outubro 21

🌽 Illinois – Remoto

🌽 Illinois – Remote

⏰ Tempo Integral

🟠 Sênior

👮‍♂️ Cibersegurança / Engenheiro de Segurança

🦅 Patrocina Visto H1B

Esta empresa já patrocinou vistos H1B no passado.

👻 Score fantasma 25%

O que significa: a chance de ninguém estar realmente contratando para esta vaga.Como ler: 60% ou mais significa que achamos que é uma vaga fantasma. Pontuações mais baixas preocupam menos.Como pontuamos: tempo em aberto, republicações, vagas abertas vs tamanho do time, rapidez para fechar vagas, e se o salário está divulgado.Observação: é uma estimativa de dados públicos, não um julgamento da empresa. Vagas reais podem ter pontuação alta, então use como uma dica, não como um fato.

Candidatar-se

Encontrar Vagas Remotas Similares

DecisionPoint Corporation

SiteLinkedInTodas as Vagas

51 - 200 funcionários

Fundada em 2011

🎖️ Defesa

💼 Consultoria

📦 Logística

Defense • Consulting • Logistics

A DecisionPoint Corporation é uma Pequena Empresa de Propriedade de Veteranos com Deficiência em Serviço, especializada em modernização de TI e transformação digital para agências governamentais. Eles oferecem serviços abrangentes, incluindo cibersegurança, TI para saúde e soluções de automação inteligente, visando melhorar a eficiência e a eficácia operacional, ao mesmo tempo em que garantem uma migração segura para a nuvem. Sua abordagem de Centros de Excelência impulsiona o sucesso da missão, abordando os desafios mais urgentes enfrentados por entidades governamentais por meio de tecnologia inovadora e suporte especializado.

Descrição

• Lead delivery of ENLIST Task 6 cybersecurity activities and serve as the senior contractor cybersecurity subject matter expert • Support the Government ISSM in security governance, risk prioritization, policy maintenance, authorization support, and cybersecurity inspection readiness • Advise Government and program leadership on cybersecurity risks, compliance gaps, remediation priorities, and operational impacts • Lead coordination of cybersecurity remediation activities across infrastructure, application, service delivery, contractor, and Government teams • Support Risk Management Framework activities and authorization documentation development, maintenance, review, and validation • Support Authority to Operate and Authority to Connect activities for applicable networks, systems, applications, and software • Coordinate implementation and assessment of NIST security controls and Department of Defense cybersecurity requirements • Oversee IAVA and IAVM tracking and remediation • Coordinate recurring ACAS scans, analyze findings, and track vulnerabilities through remediation or approved risk acceptance • Review Endpoint Security Solutions reports and coordinate resolution of security issues • Develop, maintain, and monitor Plans of Action and Milestones, corrective-action plans, and remediation records • Monitor corrective actions to ensure findings are assigned, documented, validated, and closed within required timeframes • Support certification and accreditation reviews, security control testing, Security Test and Evaluation activities, and associated test plans • Support Cybersecurity Readiness Inspection preparation, assessment activities, findings management, remediation, and follow-up reporting • Maintain and update the program Information Security Plan, cybersecurity policies, standard operating procedures, user guides, memoranda for record, and system interconnection agreements • Review and validate system access requests and support enforcement of approved access-control requirements • Evaluate systems and assets against NIST, National Security Agency, STIG, and approved desktop or platform security requirements • Monitor changes to cybersecurity regulations, policies, technical requirements, and threat conditions, and recommend updates to controls and procedures • Produce cybersecurity status reports, risk summaries, compliance metrics, inspection-readiness assessments, and executive-level briefings • Validate cybersecurity data used in program reports, dashboards, and Government submissions • Translate vulnerability data, security-control deficiencies, and technical findings into prioritized, actionable risk recommendations • Promote consistent cybersecurity practices, lessons learned, and continuous improvement across the ENLIST program

🎯 Requisitos

• Active Secret clearance or higher • Bachelor’s degree in Cybersecurity, Information Systems, Computer Science, or a related field • Minimum of 12 years of relevant cybersecurity or information security experience • Current Certified Information Systems Security Professional (CISSP) certification • Demonstrated experience leading Department of Defense cybersecurity operations • Demonstrated ability to translate technical cybersecurity findings into actionable risk recommendations • Preferred: experience supporting a Government ISSM, Information System Security Officer, Authorizing Official, or system owner • Preferred: advanced knowledge of the DoD Risk Management Framework, including authorization package development, security-control assessment, continuous monitoring, and authorization maintenance • Preferred: experience applying DoDI 8510.01, NIST SP 800-53, FISMA, and related federal and DoD cybersecurity requirements • Preferred: experience supporting Authority to Operate and Authority to Connect activities in a DoD environment • Preferred: experience with ACAS or Tenable, Endpoint Security Solutions, STIG Viewer, Security Content Automation Protocol tools, or comparable platforms • Preferred: experience managing IAVA, IAVM, Plan of Action and Milestones, and corrective-action remediation processes • Preferred: experience supporting Cybersecurity Readiness Inspections, security assessments, control testing, or Security Test and Evaluation activities • Preferred: experience with eMASS or comparable governance, risk, and compliance platforms • Preferred: experience developing cybersecurity policies, security plans, standard operating procedures, interconnection agreements, risk assessments, and executive briefings • Preferred: familiarity with ServiceNow or other workflow platforms used to manage security findings, risks, remediation activities, and performance reporting • Preferred: additional certifications such as CISM, CCSP, CGRC, CASP+, or equivalent advanced cybersecurity credentials • Preferred: familiarity with current DoD 8140 cybersecurity workforce qualification requirements • Strong leadership, stakeholder coordination, risk communication, analytical, and technical writing skills • Ability to lead multidisciplinary teams and manage multiple high-priority cybersecurity activities in a remote mission environment

🏖️ Benefícios

• Equal Employment Opportunity and Affirmative Action employer • Authorization for DecisionPoint Corporation to share submitted resumes and personal information with subsidiaries, affiliates, and teaming partners for consideration for this and comparable positions

📊 Verifique sua pontuação de currículo para esta vaga

Melhore suas chances de conseguir uma entrevista verificando sua pontuação de currículo antes de se candidatar.

Enviar Currículo