JCIP Inspection Domain Reviewer - Policy (Expert)
About The Position
Pueo is seeking a highly experienced JCIP Inspection Domain Reviewer (Policy Reviewer) to join its multidisciplinary team onsite at client locations. The role provides high visibility and exposure to senior leadership across major Intelligence Community agencies and Department of Defense commands. Worksite locations include the National Capital Region, Landover, Maryland, Norfolk, Virginia, Nebraska, and St. Louis, Missouri. The Policy Reviewer evaluates the cybersecurity posture of enterprise environments across the Intelligence Community. The role supports the Government client and Task Lead, conducts policy assessments and independent reviews of policy compliance for JCIP inspections, and assesses compliance with Intelligence Community Directives, Security Requirement Guides, and NIST 800-53 revision 5 controls. The reviewer engages leadership, technical staff, and organizational subject matter experts before and during inspections; collects and analyzes data for the Threat Informed Critical Controls List; prepares assessment deliverables; and communicates findings through presentations and written reports. The role also participates in inspection planning, execution, and reporting, and keeps current with IC policy trends and technologies to refine security inspection protocols. Travel is required to support onsite inspections at various Intelligence Community locations, including CONUS and OCONUS travel. The posting indicates travel of up to 35%, averaging 8–12 weeks, with some international travel; a passport is required. Pueo describes itself as a national security cyber company that delivers cybersecurity across defense, intelligence, homeland security, federal enterprise, and critical infrastructure. The company states that it provides a variety of employee benefits; specific benefits are not listed. Pueo is an equal employment opportunity and affirmative action employer.
Requirements
- Active/current Top Secret security clearance with SCI eligibility.
- Ability to obtain and maintain a CI polygraph.
- Master's degree in a related field and 12 years of experience, or 18 or more years of experience in lieu of a completed degree.
- Ability to obtain and maintain an IAT III certification compliant with DoD 8570.01-M and DoD Directive 8140. Examples include CASP+ CE, CCNP Security, CISA, CISSP or CISSP Associate, GCED, GCIH, and CCSP.
- Experience in IC policy assessments.
- Strong interpersonal and communication skills to interact effectively with stakeholders and team members, and ability to present and brief technical data to non-technical audiences.
- Some experience leading security projects and initiatives.
- Hands-on RMF/A&A experience relevant to the Inspection Domain Reviewer Policy role.
- Experience using scanning or GRC tools, such as XACTA/eMASS, ACAS, or STIGs.
- Knowledge of and familiarity with ICDs, SRGs, and the NIST 800 series.
- Willingness and ability to travel CONUS and OCONUS according to customer needs.
Nice To Haves
- Current active Top Secret clearance with SCI eligibility and current CI polygraph.
- Current and valid IAT III certification compliant with DoD 8570.01-M and DoD Directive 8140; examples include CASP+ CE, CCNP Security, CISA, CISSP or CISSP Associate, GCED, GCIH, and CCSP.
- Collaborative team player with experience working in mixed technical teams.
- Experience presenting and briefing front-office personnel, department heads, and above.
- Background as a former CIO, military officer, GS-13 or above, or former policy lead.
- Current and valid U.S. tourist passport.
Responsibilities
- Assist the Government client and Task Lead.
- Conduct comprehensive policy assessments and detailed analysis for compliance with ICDs, SRGs, and NIST 800-53 revision 5 security controls.
- Use IC policy requirements to independently review and assess policy compliance in support of JCIP inspections.
- Interact with leadership and site technical staff before inspections.
- Interview organizational subject matter experts while conducting IC policy checklists.
- Collect data for review of a comprehensive Threat Informed Critical Controls List (TICCL) and provide written input on the data.
- Prepare assessment deliverables.
- Communicate the impacts of findings through presentations and written deliverables.
- Stay current with trends and technologies related to IC policy and refine security inspection protocols.
- Participate in inspection planning, execution, and reporting.
- Travel as required to support onsite inspections across IC locations, including CONUS and OCONUS sites.
Benefits
- Pueo provides a variety of employee benefits, though specific benefits are not listed.
- Potential annual bonuses, short- and long-term incentives, and program-specific awards are mentioned as possible components of total compensation.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
