Cyber Liaison

Kentro • Washington, DC

2d • $90,000 - $100,000 • Hybrid

About The Position

Kentro is hiring a Cyber Liaison to support the Department of Commerce (DOC). The Cybersecurity Liaison serves as the primary cybersecurity point of contact between the Department of Commerce (DOC) and its assigned Bureaus. This position provides cybersecurity governance, risk management, and compliance oversight, as well as customer support, to ensure the consistent implementation of the Department's cybersecurity policies, standards, and Federal requirements. The role supports cybersecurity program operations, GRC services, FISMA compliance activities, and continuous monitoring.

Requirements

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or related field.
• 5+ years of experience in cybersecurity, information assurance, risk management, or compliance.
• Experience supporting Federal cybersecurity programs and compliance requirements.
• Working knowledge of NIST RMF, NIST SP 800-53, NIST Cybersecurity Framework, and FISMA.
• Experience with GRC tools such as CSAM/JCAM, Archer, ServiceNow GRC, or similar platforms.
• Strong written, verbal, analytical, and customer service skills.
• US Citizen or Green card holder
• Willing and able to obtain and maintain Public Trust Clearance
• Must meet updated ID requirements: https://www.gsa.gov/technology/it-contract-vehicles-and-purchasing-programs/federal-credentialing-services/get-appointment-help/bring-required-documents
• If you do not currently meet the ID requirements outlined, you must be willing and able to update your current forms of ID in a timely manner to complete the suitability process successfully.

Nice To Haves

• Experience supporting Federal agencies.
• Professional certifications such as CISSP, CISM, CGRC (CAP), Security+, or CISA.
• Experience briefing senior leadership and working with cross-functional stakeholders.

Responsibilities

• Serve as the primary cybersecurity liaison for assigned Bureaus and maintain effective stakeholder relationships.
• Conduct recurring and ad hoc meetings to communicate cybersecurity policies, requirements, and program updates.
• Provide guidance on the implementation of NIST RMF (NIST SP 800-37), NIST Cybersecurity Framework, NIST SP 800-53, FISMA, and Department cybersecurity requirements.
• Provide Tier 2 support for GRC tools and services, including user support, training, and coordination with service providers.
• Monitor and report on Authorization to Operate (ATO) status, POA&M activities, vulnerabilities, and compliance metrics.
• Support continuous monitoring activities, including assessment, tracking, and remediation of security findings.
• Assist with Assessment and Authorization (A&A) activities and preparation of security documentation.
• Support contingency planning, disaster recovery, and continuity of operations testing and updates.
• Coordinate cybersecurity requirements waiver requests, policy exceptions, and stakeholder communications.
• Prepare reports, briefings, presentations, and metrics for leadership and stakeholders.

Benefits

• Paid time off
• Healthcare benefits
• Supplemental benefits
• 401k including an employer match
• Discount perks
• Rewards
• Education reimbursement for certifications, degrees, or professional development
• Flexibility for professional growth and networking

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level