Information Assurance Lead

American Systems•Arlington, VA

4d•$160,000 - $205,000

About The Position

Now Hiring at AMERICAN SYSTEMS Epsilon, Inc. has joined AMERICAN SYSTEMS! As one organization, we offer expanded resources, streamlined operations, and increased opportunities for growth and development. Join us to be part of a dynamic, collaborative environment dedicated to innovation and customer success. Responsibilities An Average Day : As t he Information Assurance Analyst Lead you will be responsible for overseeing information assurance activities within a complex environment that include domestic and international infrastructures and data centers. You will ensure compliance with federal regulations, security standards, and best practices while supporting a large enterprise effort on a federal contract. You will also guide a team of analysts, manage security controls, and provide strategic direction to enhance the security posture of the organization. Additionally, in this position you will: Lead a team of Information Assurance Analysts, providing guidance, mentorship, and performance management. Develop, implement, and maintain information security policies, procedures, and standards. Conduct risk assessments and vulnerability analysis to identify and mitigate security risks. Oversee the configuration, management, and monitoring of security controls across multiple environments. Ensure compliance with federal regulations and frameworks such as FISMA, NIST, and RMF. Collaborate with cross-functional teams to integrate security requirements into project planning and execution. Manage security audits, assessments, and continuous monitoring activities to maintain compliance. Report on security incidents, conduct root cause analysis, and develop corrective actions. Coordinate security awareness training programs to educate staff on best practices and compliance requirements. Provide strategic recommendations for improving the organization’s overall security posture.

Requirements

Must be a U.S. Citizen.
Must have an active Secret clearance with the ability to obtain a Top Secret with SCI eligibility or have an active Top Secret with SCI eligibility.
Will be subject to a federal background investigation.
Minimum of 7 years of experience in information assurance or cybersecurity, including 3+ years in a lead or supervisory role.
Must hold a current 8570/8140 IAT Level II Certification (CCNA Security, CySA+, GICSP, GSEC, Security+ CE, CND, SSCP).
In-depth knowledge of federal information security standards, including NIST SP 800-53, FISMA, and RMF.
Proficiency with security tools and technologies such as SIEM, vulnerability scanners, and endpoint protection platforms.
Experience with security control implementation and continuous monitoring in cloud, on-premises, and hybrid environments.
Strong analytical skills, with the ability to perform risk analysis and develop effective mitigation strategies.
Excellent leadership and team management skills, with experience in developing and leading high-performing teams.
Effective communication skills, capable of interacting with senior leadership, stakeholders, and technical teams.
Experience conducting security audits and responding to findings with corrective action plans.
Must be able to travel regularly, both domestically and internationally, international travel will require a current US Passport.

Responsibilities

Lead a team of Information Assurance Analysts, providing guidance, mentorship, and performance management.
Develop, implement, and maintain information security policies, procedures, and standards.
Conduct risk assessments and vulnerability analysis to identify and mitigate security risks.
Oversee the configuration, management, and monitoring of security controls across multiple environments.
Ensure compliance with federal regulations and frameworks such as FISMA, NIST, and RMF.
Collaborate with cross-functional teams to integrate security requirements into project planning and execution.
Manage security audits, assessments, and continuous monitoring activities to maintain compliance.
Report on security incidents, conduct root cause analysis, and develop corrective actions.
Coordinate security awareness training programs to educate staff on best practices and compliance requirements.
Provide strategic recommendations for improving the organization’s overall security posture.