Job Family:
Cyber Consulting
Travel Required:
Clearance Required:
What You Will Do:
The Cybersecurity Strategy & Operations Lead will work directly with the client’s CIO office leadership to support modernizing their Cybersecurity program. This role will be focused on strategy through implementation of cyber governance programs; it is both strategic and operational in nature. This role will coordinate with project-implementing teams and support oversight of cybersecurity investments for the client’s leadership, advise CIO office leadership on IT investments, and provide recommendations to leadership on Cybersecurity initiatives including Executive Order compliance and incident response. In addition, the role will be responsible for providing systems security support for Secret information systems for our federal client to achieve and maintain active ATO statuses for multiple systems and applications.
Duties will include:
Provide strategic and operational recommendations to leadership on Cybersecurity initiatives including governance, compliance, and cybersecurity operational efficiency.
Assist with developing briefing materials and executive level presentations to support project status briefings.
Provide input for/manage cybersecurity performance metrics.
Reviewing and updating RMF ATO packages, policy and procedure documents, and related artifacts in accordance with applicable standards and regulations.
Requesting, obtaining, reviewing, and analyzing a variety of artifacts to assist in executing security and privacy control testing such as policies, plans, SOPs, system screenshots, and system configuration settings.
Scoping and tailoring security and privacy control baselines based on system missions and categorizations.
Preparing and updating security documentation and working with technical teams to support the creation and maintenance of technical documentation.
Performing rigorous evaluations of NIST SP 800-53 security and privacy controls using NIST SP 800-53A standards.
Performing walkthrough interviews and maintaining communication with a variety of client stakeholders, including system technical personnel such as network engineers and system administrators.
Evaluating the design and operating effectiveness of security and privacy controls using provided artifacts, industry-standard guidance, leading practices, and professional judgement.
Testing and documenting the results of security and privacy controls test work in a consistent and high-quality manner.
Analyzing, summarizing, and communicating security and privacy control assessment results to a variety of client stakeholders, including senior leadership.
Developing and maintaining Plans of Action and Milestones to capture identified security and privacy control shortfalls and facilitate correction.
Facilitating third-party security assessment activities, including direct interactions with third party security assessors.
What You Will Need:
An ACTIVE and MAINTAINED SECRET Federal or DoD security clearance
Bachelor’s degree
SIX (6) years of experience related to Cybersecurity or Project/Program Management or Communications or IT Security or Technology Consultant
What Would Be Nice To Have:
Master’s Degree
Experience working within a PMO team and leading people.
Understanding of the NIST Risk Management Framework and/or the Authorization to Operate (ATO) process.
Experience conducting HVA assessments or performing Risk and Vulnerability Assessments.
Excellent oral and written communication and presentation skills.
Experience managing direct client engagement team to deliver impactful support to Federal clients.
Experience developing and maintaining working relationships while serving Federal clients onsite.
Ability to identify obstacles and opportunities that impact the success of plans or initiatives.
Strong Microsoft Office skills (e.g., Excel, Word, PowerPoint)
U.S. Department of State experience a plus
PMP or similar certification
The annual salary range for this position is $125,600.00-$188,400.00. Compensation decisions depend on a wide range of factors, including but not limited to skill sets, experience and training, security clearances, licensure and certifications, and other business and organizational needs.
What We Offer:
Guidehouse offers a comprehensive, total rewards package that includes competitive compensation and a flexible benefits package that reflects our commitment to creating a diverse and supportive workplace.
Benefits include:
Medical, Rx, Dental & Vision Insurance
Personal and Family Sick Time & Company Paid Holidays
Position may be eligible for a discretionary variable incentive bonus
Parental Leave and Adoption Assistance
401(k) Retirement Plan
Basic Life & Supplemental Life
Health Savings Account, Dental/Vision & Dependent Care Flexible Spending Accounts
Short-Term & Long-Term Disability
Student Loan PayDown
Tuition Reimbursement, Personal Development & Learning Opportunities
Skills Development & Certifications
Employee Referral Program
Corporate Sponsored Events & Community Outreach
Emergency Back-Up Childcare Program
Mobility Stipend
About Guidehouse
Guidehouse is an Equal Employment Opportunity / Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to race, color, national origin, ancestry, citizenship status, military status, protected veteran status, religion, creed, physical or mental disability, medical condition, marital status, sex, sexual orientation, gender, gender identity or expression, age, genetic information, or any other basis protected by law, ordinance, or regulation.
Guidehouse will consider for employment qualified applicants with criminal histories in a manner consistent with the requirements of applicable law or ordinance including the Fair Chance Ordinance of Los Angeles and San Francisco.
If you have visited our website for information about employment opportunities, or to apply for a position, and you require an accommodation, please contact Guidehouse Recruiting at 1-571-633-1711 or via email at RecruitingAccommodation@guidehouse.com. All information you provide will be kept confidential and will be used only to the extent required to provide needed reasonable accommodation.
Guidehouse does not accept unsolicited resumes through or from search firms or staffing agencies. All unsolicited resumes will be considered the property of Guidehouse and Guidehouse will not be obligated to pay a placement fee.