Description
We are seeking a highly skilled Cyber and IT Risk Management Specialist to implement and maintain the Network Services Information Assurance Program. The successful candidate will ensure security controls function correctly, standardize templates and processes, and participate in NIH and CIT security working groups.
Responsibilities:
- Implement the Network Services Information Assurance Program
- Standardize templates, processes, and policies in alignment with NIH and HHS guidance
- Participate in NIH and CIT security working groups
- Lead development and maintenance of security documentation
- Conduct annual risk assessments, security impact analyses, and support incident response
- Oversee ATO-related activities for Network Services
- Maintain technical security documentation
- Conduct continuous monitoring, vulnerability assessment, and compliance reviews
- Manage and track remediation activities and waiver documentation
Deliverables:
- Conduct assessments of controls
- Collaborate with Technical SME (Subject Matter Experts) to capture requirements
- Maintain system information security compliance
- Conduct review of accounts
- Produce weekly, monthly and quarterly status reports
- Support agency audits
- Review cybersecurity posture and operational dashboards
- Communicate noteworthy risks or threats to the program and customer executives
- Lead coordination meetings with security teams and stakeholders
- Oversee modernization and cloud-related security tasks
- Establish standards and metrics for cybersecurity reporting
- Participate in governance committees
- Conduct quarterly risk register reviews
- Oversee testing activities including penetration tests
- Support annual enterprise risk assessments and updates to governance materials
Requirements:
- BS degree in Computer Science, Information Systems or equivalent experience (15+ years)
- One or a combination of the following certifications: Security+, CAP, CISSP, CISA, CEH
- In-depth knowledge of Federal security policies, standards, guidelines, and NIST frameworks
- Experience in requirements analysis, mitigation and control implementation
- Ability to obtain a Public Trust
Desired Skills:
- Experience with FISMA, RMF, and the NIST SP 800 series
- Hands-on vulnerability management experience
- Project management experience
- Ability to produce high-quality deliverables and manage deadlines
- Strong analytical and communication skills
- Ability to work independently and collaborate with diverse teams
For more fresh new jobs, check out yubhub.co.