Job Requirements
Remote Alexandria, VA
Public Trust Polygraph not specified
Senior Level Career (10+ yrs experience)
Salary not specified
Join Premium to unlock estimated salaries 
Job Description
Cybersecurity Information Assurance / Security Specialist Lead
Position Summary: We are seeking a Cyber Information Assurance / Security Specialist Lead to drive enterprise cybersecurity risk management, governance, and regulatory compliance. This role leads security assessment teams, executes Risk Management Framework (RMF) lifecycles, and ensures operational alignment with federal mandates including FISMA and NIST guidelines. The ideal candidate blends deep technical auditing expertise with proven leadership skills to manage vulnerabilities, enforce security policies, and maintain robust system authorization packages.
Key Responsibilities
• Program Governance & Compliance: Direct cybersecurity risk management, compliance, and governance programs to align organizational systems with FISMA, NIST, and RMF standards.
• Team Leadership & Mentorship: Lead, guide, and manage a team of security specialists and assessment personnel in executing authorization activities and control evaluations.
• Security Control Assessments: Oversee full-lifecycle security control assessments (SCAs) to evaluate system protections, identify gaps, and validate remediation strategies.
• Vulnerability Management & Risk Assessment: Monitor enterprise vulnerability management operations, evaluate security risks, and enforce continuous monitoring practices across systems.
• Policy & Strategy Development: Author, review, and implement enterprise cybersecurity policies, operational guidelines, and system security plans (SSPs) to maintain audit readiness.
• Stakeholder Advisory: Serve as the primary subject matter expert on federal security frameworks, providing strategic recommendations to system owners and executive leadership.
Qualifications Required:
• Education: Bachelor’s degree in Information Technology, Cybersecurity, Computer Science, or a related technical discipline.
• Professional Experience: 8–10+ years implementing and managing information assurance, risk management, and security compliance programs in a federal or regulated environment.
• Leadership Experience: 3–5+ years leading security specialists, assessment teams, or cross-functional cybersecurity projects.
• Framework Mastery: Deep operational experience with the NIST RMF lifecycle, FISMA compliance, NIST SP 800-53 controls, and federal security authorization activities.
• Vulnerability & Audit Tools: Proven track record conducting security control assessments, vulnerability analyses, and policy development.
Preferred Certifications:
• Core Security: CISSP, CISM, CAP/CGRC, GSLC, or GSEC.
• Cloud Security: AWS Certified Security - Specialty, Microsoft Certified: Azure Security Engineer Associate (AZ-500), or equivalent.
• Job Location: Hybrid to Alexandria, VA.
• Clearance: Public Trust or higher.
Position Summary: We are seeking a Cyber Information Assurance / Security Specialist Lead to drive enterprise cybersecurity risk management, governance, and regulatory compliance. This role leads security assessment teams, executes Risk Management Framework (RMF) lifecycles, and ensures operational alignment with federal mandates including FISMA and NIST guidelines. The ideal candidate blends deep technical auditing expertise with proven leadership skills to manage vulnerabilities, enforce security policies, and maintain robust system authorization packages.
Key Responsibilities
• Program Governance & Compliance: Direct cybersecurity risk management, compliance, and governance programs to align organizational systems with FISMA, NIST, and RMF standards.
• Team Leadership & Mentorship: Lead, guide, and manage a team of security specialists and assessment personnel in executing authorization activities and control evaluations.
• Security Control Assessments: Oversee full-lifecycle security control assessments (SCAs) to evaluate system protections, identify gaps, and validate remediation strategies.
• Vulnerability Management & Risk Assessment: Monitor enterprise vulnerability management operations, evaluate security risks, and enforce continuous monitoring practices across systems.
• Policy & Strategy Development: Author, review, and implement enterprise cybersecurity policies, operational guidelines, and system security plans (SSPs) to maintain audit readiness.
• Stakeholder Advisory: Serve as the primary subject matter expert on federal security frameworks, providing strategic recommendations to system owners and executive leadership.
Qualifications Required:
• Education: Bachelor’s degree in Information Technology, Cybersecurity, Computer Science, or a related technical discipline.
• Professional Experience: 8–10+ years implementing and managing information assurance, risk management, and security compliance programs in a federal or regulated environment.
• Leadership Experience: 3–5+ years leading security specialists, assessment teams, or cross-functional cybersecurity projects.
• Framework Mastery: Deep operational experience with the NIST RMF lifecycle, FISMA compliance, NIST SP 800-53 controls, and federal security authorization activities.
• Vulnerability & Audit Tools: Proven track record conducting security control assessments, vulnerability analyses, and policy development.
Preferred Certifications:
• Core Security: CISSP, CISM, CAP/CGRC, GSLC, or GSEC.
• Cloud Security: AWS Certified Security - Specialty, Microsoft Certified: Azure Security Engineer Associate (AZ-500), or equivalent.
• Job Location: Hybrid to Alexandria, VA.
• Clearance: Public Trust or higher.
group id: 91130095