Zero Trust Project Lead

ASRC Federal•Quantico, VA

1d•Hybrid

About The Position

The Zero Trust Project Lead is a critical leadership role responsible for driving the planning, implementation, and ongoing management of the organization's Zero Trust security architecture. This individual will be the primary point of contact for all Zero Trust initiatives, collaborating with stakeholders across IT, security, and business units to ensure successful adoption and measurable improvements in the organization's security posture. The Zero Trust Project Lead will champion the principles of Zero Trust, promote its understanding throughout the organization, and lead the effort to transform existing security models and ensure the objectives of EO 14028 and other Federal requirements are met.

Requirements

Minimum of 8 - 10 years of experience in cybersecurity, with a focus on security architecture, network security, and identity and access management.
Active Top Secret Clearance REQUIRED, eligible to be upgraded to TS/SCI
Bachelor’s Degree, or equivalent experience in Cybersecurity, and/or Information Systems Management, Information Technology
Must meet 8570 certification requirements at the time of hire.
IAT Level III (e.g., CASP+ CE, CCNP Security, CISA, CISSP, GCED, GCIH, CCE, GCFA, EnCE or CCSP; The addition of a PMP is preferred
Must be able to communicate complex technical ideas to a diverse customer base both verbally and in written form.

Responsibilities

Strategic Planning and Vision:
Develop and maintain a comprehensive Zero Trust security strategy aligned with the organization's business goals and risk tolerance.
Define the scope, objectives, and roadmap for Zero Trust implementation.
Identify key stakeholders and build consensus around the Zero Trust vision.
Stay up-to-date on the latest Zero Trust trends, technologies, and best practices.
Project Management:
Plan, organize, and manage Zero Trust projects from inception to completion.
Develop project plans and timelines
Track project progress and report on key milestones.
Identify and mitigate project risks and issues.
Ensure projects are delivered on time and within budget.
Technical Leadership:
Provide technical guidance and expertise on Zero Trust architecture, technologies, and implementation.
Lead the selection, evaluation, and deployment of Zero Trust solutions, including microsegmentation, multi-factor authentication (MFA), identity and access management (IAM), and data security technologies.
Define and enforce Zero Trust security policies and standards.
Oversee the integration of Zero Trust principles into existing IT infrastructure and applications.
Stakeholder Management:
Collaborate with IT, security, and business units to understand their needs and requirements.
Communicate the benefits of Zero Trust to stakeholders and address any concerns.
Build relationships with key stakeholders and foster a collaborative environment.
Provide regular updates to leadership on the progress of Zero Trust initiatives.
Security Architecture and Design:
Assist in the design and implement Zero Trust security architectures that align with industry best practices and regulatory requirements.
Define and enforce microsegmentation policies to limit the blast radius of security incidents.
Implement strong authentication and authorization controls.
Monitor and analyze network traffic for anomalous behavior.
Ensure data security and privacy in accordance with organizational policies and regulatory requirements.
Policy and Governance:
Develop and maintain Zero Trust security policies and procedures.
Ensure compliance with relevant security regulations and standards.
Conduct regular security audits and assessments to identify areas for improvement.
Implement and enforce security awareness training programs to promote Zero Trust principles.
Metrics and Reporting:
Define key performance indicators (KPIs) to measure the effectiveness of Zero Trust initiatives.
Track and report on security metrics to demonstrate progress and identify areas for improvement.
Develop dashboards and reports to visualize Zero Trust security posture.