Cybersecurity Lead

This is a fully remote position, open to applicants in United States.

📋 Description

• Deliver senior technical and operational guidance for cybersecurity initiatives that support Institutions of Higher Education managing Federal Student Aid information.

• Oversee breach response and remediation, ensure cybersecurity compliance and audit supervision, manage threat risk, and facilitate communication and outreach within the education sector.

• Coordinate cybersecurity efforts among FSA offices, contractors, IHEs, and associated organizations.

• Achieve metrics related to reporting, transparency, customer satisfaction, and stakeholder experience.

• Lead incident response and breach management assistance for IHEs.

• Direct incident containment, remediation, recovery, reporting, and management processes.

• Supervise the categorization, analysis, documentation, tracking, and resolution of cybersecurity cases involving IHEs.

• Lead and assist in compliance assessments for cybersecurity at institutions and systems managing FSA data.

• Assess administrative, technical, and physical safeguards while identifying gaps in cybersecurity and compliance.

• Create assessment plans that outline methodology, data collection, sampling, reporting timelines, and risk-rating approaches.

• Review audit findings and corrective action plans.

• Offer subject-matter expertise on GLBA, NIST SP 800-53, NIST SP 800-171, OMB A-130, and the cybersecurity requirements set by ED/FSA.

• Identify risks, compliance shortcomings, and control weaknesses, providing recommendations for remediation.

• Monitor corrective actions and issues to ensure resolution.

• Provide cybersecurity consultancy, threat advisories, and remediation support to Title IV institutions.

• Support cybersecurity awareness initiatives and tabletop exercises for participating IHEs.

• Collaborate with FSA communications and cybersecurity stakeholders on outreach efforts.

⛳️ Requirements

• A Bachelor’s degree in Cybersecurity, Information Security, Information Technology, Computer Science, Information Assurance, Information Systems, Engineering, or a related field; equivalent relevant experience may be accepted where applicable.

• Over 10 years of experience in cybersecurity, encompassing leadership, incident response, compliance, security assessments, risk management, or Federal information security.

• A senior professional certification in the industry, such as a CISSP or an equivalent credential.

• Eligibility to obtain a 6c Public Trust is necessary.

• An active Secret level clearance or higher is preferred.

• Experience in leading or coordinating complex cybersecurity initiatives across multiple stakeholder groups.

• Proficiency in cybersecurity compliance assessments, incident response, risk management, and remediation processes.

• Familiarity with GLBA, NIST SP 800-53, NIST SP 800-171, and relevant Federal cybersecurity regulations.

• Experience in evaluating security controls and recognizing administrative, technical, and physical cybersecurity deficiencies.

• Capability to advise stakeholders on corrective measures and strategies for cybersecurity remediation.

• Strong analytical skills to assess complex cybersecurity incidents, risks, findings, and compliance issues.

• Excellent leadership, technical writing, analytical, communication, presentation, and stakeholder management skills.

• U.S. Citizenship is required.

🏝️ Benefits

• Certification incentive program

• PTO

• Floating federal holiday options

• HMO insurance options

• High Deductible health insurance plans

• Health Savings Accounts (HSAs)

• Flex Spending Accounts (FSAs)

• Full Dental Plans

• Vision insurance

• Short-term/long-term disability insurance

• Life Insurance

• 401(k) matching

• Flexible Work Environment

• Professional development rewards for obtaining new certifications aligned with business needs