Cybersecurity Lead – ISSM Support

This is a fully remote position, open to applicants in Illinois.

📋 Description

• Oversee the execution of ENLIST Task 6 cybersecurity initiatives while acting as the senior contractor cybersecurity subject matter expert.

• Assist the Government Information System Security Manager (ISSM) with security governance, risk prioritization, policy management, authorization support, and ensuring cybersecurity inspection readiness.

• Provide guidance to Government and program leadership regarding cybersecurity risks, compliance deficiencies, remediation priorities, and operational consequences.

• Facilitate the coordination of cybersecurity remediation efforts among infrastructure, application, service delivery, contractor, and Government teams.

• Aid in Risk Management Framework activities and in the development, maintenance, review, and validation of authorization documentation.

• Support Authority to Operate and Authority to Connect processes for relevant networks, systems, applications, and software.

• Coordinate the implementation and evaluation of NIST security controls and Department of Defense cybersecurity mandates.

• Supervise the tracking and remediation of IAVA and IAVM notices.

• Organize regular ACAS scans, assess findings, and monitor vulnerabilities through remediation or authorized risk acceptance.

• Examine Endpoint Security Solutions reports and facilitate the resolution of security issues.

• Create, sustain, and oversee Plans of Action and Milestones, corrective-action strategies, and remediation documentation.

• Track corrective measures to guarantee that findings are assigned, documented, validated, and resolved within specified timeframes.

• Assist with certification and accreditation evaluations, security control testing, Security Test and Evaluation efforts, and related test plans.

• Support preparation for Cybersecurity Readiness Inspections, assessment tasks, findings management, remediation, and follow-up reporting.

• Maintain and refresh the program's Information Security Plan, cybersecurity policies, standard operating procedures, user guides, memoranda for record, and system interconnection agreements.

• Assess and approve system access requests while enforcing established access-control protocols.

• Evaluate systems and assets against NIST, National Security Agency standards, STIG, and sanctioned desktop or platform security criteria.

• Keep abreast of changes to cybersecurity regulations, policies, technical specifications, and threat landscapes, recommending updates to controls and procedures accordingly.

• Generate cybersecurity status reports, risk summaries, compliance metrics, inspection-readiness evaluations, and executive briefings.

• Verify the accuracy of cybersecurity data utilized in program reports, dashboards, and Government submissions.

• Convert vulnerability data, security control deficiencies, and technical findings into prioritized, actionable risk recommendations.

• Foster consistent cybersecurity practices, share lessons learned, and encourage continuous improvement across the ENLIST program.

⛳️ Requirements

• Active Secret clearance or higher.

• Bachelor’s degree in Cybersecurity, Information Systems, Computer Science, or a related discipline.

• At least 12 years of pertinent cybersecurity or information security experience.

• Current Certified Information Systems Security Professional (CISSP) certification.

• Proven track record in leading Department of Defense cybersecurity operations.

• Demonstrated capability to translate technical cybersecurity findings into actionable risk recommendations.

• Preferred: experience assisting a Government ISSM, Information System Security Officer, Authorizing Official, or system owner.

• Preferred: advanced understanding of the DoD Risk Management Framework, including the development of authorization packages, security control assessment, continuous monitoring, and maintenance of authorizations.

• Preferred: experience applying DoDI 8510.01, NIST SP 800-53, FISMA, and associated federal and DoD cybersecurity mandates.

• Preferred: experience facilitating Authority to Operate and Authority to Connect processes in a DoD context.

• Preferred: familiarity with ACAS or Tenable, Endpoint Security Solutions, STIG Viewer, Security Content Automation Protocol tools, or similar platforms.

• Preferred: experience overseeing IAVA, IAVM, Plan of Action and Milestones, and corrective-action remediation workflows.

• Preferred: experience assisting with Cybersecurity Readiness Inspections, security evaluations, control testing, or Security Test and Evaluation activities.

• Preferred: experience with eMASS or similar governance, risk, and compliance tools.

• Preferred: experience crafting cybersecurity policies, security plans, standard operating procedures, interconnection agreements, risk assessments, and executive presentations.

• Preferred: familiarity with ServiceNow or other workflow platforms utilized for managing security findings, risks, remediation tasks, and performance reporting.

• Preferred: additional certifications such as CISM, CCSP, CGRC, CASP+, or equivalent advanced cybersecurity qualifications.

• Preferred: familiarity with current DoD 8140 cybersecurity workforce qualification standards.

• Strong leadership, stakeholder coordination, risk communication, analytical, and technical writing abilities.

• Capacity to lead multidisciplinary teams and oversee multiple high-priority cybersecurity initiatives in a remote mission setting.

🏝️ Benefits

• Equal Employment Opportunity and Affirmative Action employer.

• Authorization for DecisionPoint Corporation to share submitted resumes and personal information with subsidiaries, affiliates, and teaming partners for consideration for this and similar roles.