Cybersecurity Compliance & Incident Response Specialist

This is a fully remote position, open to applicants in District of Columbia, +1 more state.

📋 Description

• Deliver advanced cybersecurity incident response and breach management assistance for higher education institutions managing federal data.

• Offer guidance on incident reporting and handling to effectively contain, remediate, and recover from cybersecurity events.

• Oversee remediation and incident response efforts in collaboration with reporting institutions.

• Classify, analyze, document, track, and manage cybersecurity cases within institutions of higher education until resolution.

• Coordinate breach response efforts across customer offices, contractors, higher education institutions, and affiliated organizations.

• Examine incident data and evidence to identify cybersecurity risks, compliance issues, affected data, and necessary remediation actions.

• Monitor remediation efforts and corrective actions until they are resolved.

• Create incident reports, technical findings, recommendations, case documentation, and updates on status.

• Conduct and facilitate cybersecurity compliance evaluations for institutions and systems managing federal data.

• Assess administrative, technical, and physical safeguards to identify compliance deficiencies.

• Formulate assessment plans that encompass methodology, data gathering, sampling, reporting timelines, and risk-rating techniques.

• Review institutional information security programs and the implementation of required safeguards.

• Analyze audit data and corrective action plans.

• Evaluate safeguards concerning risk assessment, identity and access management, data classification and inventory, encryption, multi-factor authentication, change management, secure development, logging and monitoring, incident response, third-party risk, and security awareness.

• Identify cybersecurity threats and control vulnerabilities impacting federal information security.

• Provide remediation suggestions, consulting, threat advisories, and support for remediation efforts.

• Assist in planning corrective actions and remediation initiatives.

• Collaborate with institutional security teams and customer stakeholders to address cybersecurity and compliance challenges.

• Ensure that deliverables comply with agency data handling and Controlled Unclassified Information (CUI) protection standards.

• Act as a senior cybersecurity expert for the customer and partner institutions.

• Communicate incidents, vulnerabilities, compliance deficiencies, and remediation needs to both technical and non-technical audiences.

• Facilitate activities among higher education stakeholders, customer offices, contractors, cybersecurity staff, and impacted organizations.

• Support cybersecurity awareness initiatives and conduct tabletop exercises.

• Provide mentorship and guidance to less-experienced cybersecurity professionals.

⛳️ Requirements

• Over 10 years of experience in cybersecurity incident response, handling, compliance, security assessments, or cyber risk management.

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Information Assurance, Information Systems, Engineering, or a related technical field.

• Advanced industry certification such as CISSP or an equivalent credential.

• Proven track record in investigating, coordinating, documenting, and managing cybersecurity incidents through to remediation and closure.

• Experience in conducting or supporting cybersecurity compliance assessments and evaluating technical, administrative, and physical safeguards.

• Strong understanding of incident containment, remediation, recovery, corrective action tracking, and cybersecurity risk management.

• Experience in assessing security controls and pinpointing compliance gaps and remediation necessities.

• Background in working with sensitive or regulated information such as Controlled Unclassified Information (CUI), Personally Identifiable Information (PII), Federal Tax Information (FTI), or similarly protected data.

• Capability to analyze complex cybersecurity data and convert findings into clear, actionable recommendations.

• Exceptional technical writing, analytical, communication, and stakeholder coordination abilities.

• Skill in collaborating effectively with government personnel, institutional stakeholders, cybersecurity teams, auditors, technical staff, and organizational leadership.

• Familiarity with NIST SP 800-61 Revision 3.

• Strong understanding of relevant cybersecurity regulatory and control frameworks.

• Must be able to obtain and maintain a Public Trust clearance.

• U.S. citizenship is required to secure the necessary clearance.

🏝️ Benefits

• Choice of medical plans, including HSA and PPO options, with company contributions.

• Dental and vision insurance for employees and their families.

• Company-sponsored life insurance, short-term disability, and long-term disability coverage.

• Optional supplemental life, accident, and critical illness insurance.

• 401(k) retirement plan with company matching contributions.

• Paid time off that increases with years of service.

• Paid federal holidays.

• Funding for certifications and professional development opportunities.

• Access to the Valiant University training portal.

• Flexible spending accounts.

• Wellness and fitness initiatives.

• Referral bonuses.

• Flexible remote work arrangements with a quiet, distraction-free workspace.

• Occasional travel to the Washington DC Metro area.

• Reasonable accommodations for qualified individuals with disabilities.