Cybersecurity Strategy Consultant (Part-Time, On-Site)

Oxley Enterprises®, Inc.•Silver Spring, MD

1d•$48 - $67•Onsite

About The Position

The Cybersecurity Strategy Consultant provides advisory and strategic support for Joint Pathology Center (JPC) information technology/information management (IT/IM) cybersecurity initiatives, governance, compliance, and portfolio management activities. The consultant supports cybersecurity assessments, project coordination, stakeholder engagement, transition planning, and reporting efforts while assisting leadership with the implementation of enterprise cybersecurity and IT modernization objectives. This position is part-time.

Requirements

10 years of cybersecurity consulting experience
Bachelors Degree in information technology, computer science, engineering, or related field
Above average experience supporting cybersecurity governance, risk management, and IT/IM strategic initiatives
Above average experience developing and maintaining cybersecurity documentation, policies, and procedures
Above average experience providing cybersecurity investment analysis and recommendations
Strong knowledge of DoD and federal cybersecurity policies and compliance requirements
Strong knowledge of cybersecurity assessment processes, security controls, and compliance monitoring activities
Ability to analyze and resolve complex technical and operational issues across multidisciplinary environments
Experience coordinating cybersecurity activities, reporting, and stakeholder communication
Knowledge of Federal Information Processing Standards (FIPS) 199 and FIPS 200 requirements
Experience supporting a federal agency
Strong problem solving and analytical thinking skills
Excellent written and verbal communication skills
Active DoD Secret Clearance; Ability to obtain a DoD Clearance as needed
U.S. Citizenship

Responsibilities

Advises JPC IT/IM on the development, organization, and maintenance of information and system artifacts needed to support IT/IM portfolio management efforts
Supports the identification of cybersecurity-related capabilities, services, and dependencies across the IT/IM portfolio
Provides strategic recommendations to improve visibility, governance, and management of portfolio-related cybersecurity efforts
Assists JPC IT/IM in identifying and defining IT systems, cybersecurity capabilities, and related services used across departments and business units
Assesses relationships among systems, services, and business functions to identify common or highly dependent capabilities
Provides strategic input to support improved understanding of the organizational cybersecurity environment
Supports alignment of cybersecurity and IT portfolio objectives with JPC vision, mission, goals, priorities, and operational requirements.
Advises on the development of quantifiable, outcome-based performance measures for cybersecurity and IT initiatives
Identifies capability gaps, redundancies, risks, and opportunities for continuous improvement
Provides strategic analysis and recommendations regarding the most effective mix of cybersecurity and IT investments.
Evaluates alternative investment strategies, priorities, and funding approaches to support leadership decision-making
Assesses potential impacts of investment options on mission performance, capability delivery, and organizational risk posture
Provides advisory support for pre-Certification and Accreditation (C&A) activities in accordance with applicable FIPS 199 and FIPS 200 requirements
Supports boundary and scope validation efforts for systems undergoing compliance or assessment review
Reviews system design documentation, system security plans, Continuity of Operations Plan (COOP) plans, disaster recovery plans, and related materials to assess compliance readiness
Provides project coordination and strategic oversight support for approved cybersecurity, information assurance, and compliance-related initiatives
Tracks milestones, risks, issues, action items, dependencies, and stakeholder decisions
Provides leadership with status visibility, strategic observations, and recommendations to support project execution and decision-making