Cybersecurity Lead

SkyePoint Decisions

4h • Remote

About The Position

SkyePoint Decisions is seeking a Cybersecurity Lead to support the Department of Education’s Federal Student Aid Cybersecurity and Privacy Support Services. The Senior Institutions of Higher Education (IHE) Cybersecurity Lead provides senior technical, operational, and program leadership for cybersecurity activities supporting institutions that handle Federal Student Aid data. The role oversees and coordinates IHE cybersecurity compliance, breach and incident response, cyber risk management, remediation, audit oversight, technical guidance, and education-sector outreach. It serves as a senior cybersecurity resource for FSA and participating institutions working to protect sensitive Federal information, including Controlled Unclassified Information (CUI), Federal Tax Information (FTI), and Personally Identifiable Information (PII).

This is a remote position and is contingent upon contract win.

Requirements

• Bachelor’s degree in Cybersecurity, Information Security, Information Technology, Computer Science, Information Assurance, Information Systems, Engineering, or a related discipline; equivalent relevant experience may be considered where permitted.
• 10 or more years of cybersecurity experience, including experience in areas such as cybersecurity leadership, incident response, cybersecurity compliance, security assessments, risk management, or Federal information security.
• Senior industry professional certification such as a CISSP or equivalent.
• Must be able to obtain a 6c Public Trust.
• Demonstrated experience leading or coordinating complex cybersecurity activities across multiple stakeholder groups.
• Experience with cybersecurity compliance assessments, incident response, risk management, and remediation.
• Knowledge of GLBA, NIST SP 800-53, NIST SP 800-171, and applicable Federal cybersecurity requirements.
• Experience assessing security controls and identifying administrative, technical, and physical cybersecurity deficiencies.
• Experience advising stakeholders on corrective actions and cybersecurity remediation strategies.
• Ability to analyze complex cybersecurity incidents, risks, assessment findings, and compliance issues.
• Strong leadership, technical writing, analytical, communication, presentation, and stakeholder-management skills.
• U.S. citizenship is required.

Nice To Haves

• An active Secret-level clearance or above is preferred.

Responsibilities

• Provide senior technical and operational leadership for cybersecurity activities supporting IHEs that handle FSA information.
• Coordinate activities across breach response and remediation, cybersecurity compliance and audit oversight, cybersecurity threat risk management, and communication support and education-sector outreach.
• Coordinate cybersecurity activities among FSA offices, FSA contractors, IHEs, and affiliated organizations.
• Achieve reporting and transparency metrics, including compliance reporting, dashboard accuracy, and communication responsiveness.
• Achieve customer and stakeholder experience metrics, including stakeholder satisfaction, governance participation, and speed of access-request fulfillment.
• Provide senior-level cybersecurity guidance to FSA stakeholders and participating institutions.
• Promote consistency and quality across compliance assessments, incident response, risk management, remediation, and cybersecurity outreach.
• Lead and coordinate incident-response and breach-management support for IHEs handling FSA information.
• Provide incident reporting and handling guidance to help IHEs contain, remediate, and recover from cybersecurity incidents.
• Coordinate remediation and response activities with reporting institutions.
• Oversee categorization, analysis, documentation, tracking, and management of IHE cybersecurity cases through closure.
• Coordinate breach-response activities involving affected FSA offices, contractors, IHEs, and affiliated organizations.
• Evaluate incident information to identify cybersecurity risks, compliance concerns, and necessary remediation actions.
• Monitor corrective actions and remediation activities through resolution.
• Lead and support cybersecurity compliance assessments of institutions and systems that handle FSA data.
• Evaluate administrative, technical, and physical safeguards and identify cybersecurity and compliance gaps.
• Oversee development of assessment plans covering methodology, data collection, sampling, reporting timelines, and risk-rating methodology.
• Evaluate the existence and effectiveness of institutional information-security programs.
• Review cybersecurity compliance and audit information and assess corrective-action plans.
• Provide subject-matter expertise in interpreting cybersecurity and information-protection requirements applicable to institutions handling FSA data.
• Support implementation and interpretation of GLBA, NIST SP 800-53, NIST SP 800-171, OMB A-130, and ED/FSA cybersecurity requirements.
• Identify cybersecurity risks, compliance deficiencies, and control weaknesses affecting the protection of FSA information.
• Provide actionable risk-mitigation and remediation recommendations.
• Support IHE corrective-action planning and track identified issues toward resolution.
• Ensure assessment and incident-response work products meet applicable Departmental data-handling and CUI protection requirements.
• Support risk-management strategies associated with GLBA audit activities.
• Provide cybersecurity consulting, threat advisories, and remediation support to Title IV institutions.
• Serve as a senior cybersecurity resource for IHEs addressing significant cybersecurity risks, compliance issues, incidents, and remediation challenges.
• Support cybersecurity awareness campaigns tailored to threats affecting the education sector.
• Support cybersecurity tabletop exercises with participating IHEs.
• Provide technical input supporting information security, privacy, outreach, and communication activities.
• Collaborate with FSA communications and cybersecurity stakeholders on outreach initiatives that help institutions understand cybersecurity risks and protective measures.

Benefits

• Certification incentive program
• Paid time off (PTO)
• Floating federal holiday options
• Health insurance options, including HMO and High Deductible plans with Health Savings Accounts (HSAs)
• Flexible Spending Accounts (FSAs)
• Dental insurance
• Vision insurance
• Short-term and long-term disability insurance
• Life insurance
• 401(k) with matching
• Flexible work environment

What This Job Offers

• Job Type: Full-time
• Career Level: Senior