Cybersecurity Strategy Consultant (Part-Time, On-Site)

Oxley Enterprises•Silver Spring, MD

3d•Onsite

About The Position

The Cybersecurity Strategy Consultant provides advisory and strategic support for Joint Pathology Center ( JPC ) information technology/information management ( IT/IM ) cybersecurity initiatives, governance, compliance, and portfolio management activities. The consultant supports cybersecurity assessments, project coordination, stakeholder engagement, transition planning, and reporting efforts while assisting leadership with the implementation of enterprise cybersecurity and IT modernization objectives. This position is part-time.

Requirements

10 years of cybersecurity consulting experience
Bachelors Degree in information technology , computer science, engineering, or related field
Above average experience supporting cybersecurity governance, risk management, and IT/IM strategic initiatives
Above average experience developing and maintaining cybersecurity documentation, policies, and procedures
Above average experience providing cybersecurity investment analysis and recommendations
Strong knowledge of DoD and federal cybersecurity policies and compliance requirements
Strong knowledge of cybersecurity assessment processes, security controls, and compliance monitoring activities
Ability to analyze and resolve complex technical and operational issues across multidisciplinary environments
Experience coordinating cybersecurity activities, reporting, and stakeholder communication
Knowledge of Federal Information Processing Standards (FIPS) 199 and FIPS 200 requirements
Experience supporting a federal agency
Strong problem solving and analytical thinking skills
Excellent written and verbal communication skills
Active DoD Secret Clearance; Ability to obtain DoD Top Secret Clearance as needed
U.S. Citizenship

Responsibilities

Advise s JPC IT/IM on the development, organization, and maintenance of information and system artifacts needed to support IT/IM portfolio management efforts
Support s the identification of cybersecurity-related capabilities, services, and dependencies across the IT/IM portfolio
Provide s strategic recommendations to improve visibility, governance, and management of portfolio-related cybersecurity efforts
Assist s JPC IT/IM in identifying and defining IT systems, cybersecurity capabilities, and related services used across departments and business unit s
Assess es relationships among systems, services, and business functions to identify common or highly dependent capabilities
Provide s strategic input to support improved understanding of the organizational cybersecurity environment
Support s alignment of cybersecurity and IT portfolio objectives with JPC vision, mission, goals, priorities, and operational requirements.
Advise s on the development of quantifiable, outcome-based performance measures for cybersecurity and IT initiatives
Identif ie s capability gaps, redundancies, risks, and opportunities for continuous improvement
Provide s strategic analysis and recommendations regarding the most effective mix of cybersecurity and IT investments.
Evaluate s alternative investment strategies, priorities, and funding approaches to support leadership decision-making
Assess es potential impacts of investment options on mission performance, capability delivery , and organizational risk posture
Provide s advisory support for pre-Certification and Accreditation (C&A) activities in accordance with applicable FIPS 199 and FIPS 200 requirements
Support s boundary and scope validation efforts for systems undergoing compliance or assessment review
Review s system design documentation, system security plans, Continuity of Operations Plan ( COOP ) plans, disaster recovery plans, and related materials to assess compliance readiness
Provide s project coordination and strategic oversight support for approved cybersecurity, information assurance, and compliance-related initiatives
Track s milestones, risks, issues, action items, dependencies, and stakeholder decisions
Provide s leadership with status visibility, strategic observations, and recommendations to support project execution and decision-making