Cybersecurity Liaison

AnaVation•Washington, DC

10d

About The Position

AnaVation is seeking a Cybersecurity Liaison to support a cabinet-level client in Washington DC. The selected individual(s) will serve as trusted advisors to agency CIOs and CISOs, be experts in cybersecurity and information assurance, and represent the Department in matters of policy, audits, and enterprise security services. Exceptional interpersonal and communication skills are required.

Requirements

Bachelors degree in Information Assurance, Cybersecurity, Information Technology, or related; may be substituted with additional relevant experience
Active CISSP or equivalent high-level cybersecurity certification (e.g., CISM, CEH, CASP)
Minimum six (6) years of hands-on cybersecurity experience such as security engineering, security operations, cloud security, and/or as an ISSO/ISSE/ISSM
Minimum four (4) years supporting a large Federal agency with FISMA, NIST 800-53, RMF, FedRAMP, SA&A, IT security audits, vulnerability and POA&M remediation, executive orders and directives, BODs, and OMB cyber memoranda
Minimum two (2) years of hands-on experience with JCAM
Minimum Active Secret clearance, with TS/SCI strongly preferred
Exceptional interpersonal skills to establish and maintain positive working relationships with all stakeholders
Expert-level command of the English language (oral and written), with experience interacting effectively at the CIO and CISO levels of large organizations
Expert-level organizational skills and ability to keep a multitude of tasks and projects on track at all times and with minimal supervision
Familiarity with cybersecurity tools such as vulnerability management, vulnerability scanning, endpoint management, data protection, SIEM, and GRC automation platforms

Nice To Haves

Masters degree
Additional advanced cybersecurity-related certifications
Hands-on, technical cybersecurity experience
Experience leading or actively participating in FISMA, FISCAM, OIG, IRS security audits

Responsibilities

Translate and contextualize complex cybersecurity concepts and policies into understandable terms to help agency CIOs, CISOs, and non-technical stakeholders understand how they apply within their organization
Coordinate security initiatives such as IT security audits and the practical application of new or updated policies and Federal mandates at the agency level
Facilitate communication between Department OCIO and agencies to improve security posture
Develop and implement security operating models and procedures tailored to organizational needs
Oversee ISSO SA&A activities to ensure information agency systems become and remain accredited per required schedules (e.g., ATT/ATO); validate that JCAM entries are current and complete
Advise agency personnel regarding Department-level requirements for new systems and decommissioning old systems
Perform risk assessments; maintain information system documentation