Cybersecurity Advisor - Senior

Mission One•Washington, DC

10d

About The Position

The Senior Cybersecurity Advisor provides strategic cybersecurity leadership and guidance to support enterprise security posture, governance, risk management, and compliance objectives. This role advises stakeholders on cybersecurity priorities, policies, architectures, and operational practices to ensure alignment with mission requirements and national cybersecurity standards.

Requirements

Experience advising executive leadership on cybersecurity strategy, governance, and risk management within complex enterprise environments.
Experience with cybersecurity frameworks and concepts, including RMF, NIST Cybersecurity Framework (CSF), NIST SP 800-53, Zero Trust, and Identity and Access Management (IAM).
Experience improving ATO processes, promoting reciprocity initiatives, and developing security policies, standards, and implementation guidance.
Experience overseeing incident response planning, vulnerability management, and security monitoring concepts, including Security Operations Centers (SOC) and Security Information and Event Management (SIEM) capabilities.
Active security clearance required TS/Poly (level determined by contract requirements).

Nice To Haves

Experience integrating cybersecurity into acquisition programs and system engineering activities through security-by-design and DevSecOps practices.
Experience briefing senior leaders and coordinating cybersecurity initiatives across multiple organizations.

Responsibilities

Advise leadership on cybersecurity priorities, policy enhancements, and governance initiatives.
Support the alignment of cybersecurity programs with organizational missions and national requirements.
Provide guidance and support for Risk Management Framework (RMF) and Authority to Operate (ATO) activities.
Promote reciprocity initiatives, control selection, and continuous monitoring strategies.
Assist in the assessment and management of enterprise cybersecurity risks.
Advise on Zero Trust strategy, implementation planning, and security architecture initiatives.
Provide guidance on identity and access management, network segmentation, encryption, and secure access methodologies.
Support the development and enhancement of incident response processes and procedures.
Advise on vulnerability management programs and security operations improvements.
Provide recommendations to strengthen security monitoring capabilities.
Support the integration of cybersecurity practices within development pipelines and acquisition activities.
Promote security-by-design principles throughout the system lifecycle.
Develop cybersecurity metrics, dashboards, and executive-level briefings.
Communicate cybersecurity risks, trends, and recommendations to senior leadership.