Job DescriptionPosition OverviewWarCollar Industries is seeking an experienced Assessment Lead (AL) to support the National Telecommunications and Information Administration (NTIA) in conducting High Value Asset (HVA) cybersecurity assessments. The Assessment Lead will serve as the primary point of contact for the assessment team and will be responsible for leading the overall execution of HVA assessments from planning through final reporting.
The Assessment Lead will oversee assessment planning, technical activities, documentation reviews, stakeholder interviews, technical scans, risk analysis, and evaluation of implemented cybersecurity controls. This position will work closely with the Technical Lead, Operators, government stakeholders, and other assessment personnel to ensure assessments are conducted effectively and that findings and recommendations are clearly communicated.
Required SkillsKey Responsibilities- Serve as the primary point of contact for the HVA assessment team.
- Lead and coordinate the assessment team throughout the assessment lifecycle.
- Manage the overall execution of HVA assessments in accordance with Department of Commerce and HVA assessment requirements.
- Develop and support assessment planning activities, including assessment scope, objectives, schedules, and technical approaches.
- Oversee assessment preparation, coordination, documentation reviews, stakeholder interviews, technical scans, testing, and risk analysis.
- Direct assessment activities designed to identify cybersecurity vulnerabilities and evaluate the effectiveness of implemented security controls.
- Coordinate activities across Risk and Vulnerability Assessment (RVA), Security Architecture Review (SAR), and System Security Engineering (SSE) requirements as applicable to the assessment.
- Lead or support Technical Exchange Meetings (TEMs), kickoff meetings, status meetings, technical discussions, and assessment out-briefs.
- Coordinate with government stakeholders to obtain required documentation, evidence, system information, and access necessary to conduct assessments.
- Ensure technical assessment activities are properly coordinated between the Assessment Lead, Technical Lead, and Operators.
- Review assessment findings and ensure technical results are accurately documented and supported by appropriate evidence.
- Analyze assessment results and communicate cybersecurity risks, vulnerabilities, control gaps, and potential impacts to stakeholders.
- Lead the development, review, and delivery of comprehensive HVA assessment reports.
- Debrief government stakeholders on assessment results, significant findings, risks, and recommended remediation actions.
- Communicate assessment status, technical issues, risks, and progress to government and contractor leadership.
- Ensure assessment deliverables are accurate, complete, and submitted within established timelines.
- Facilitate collaboration among technical personnel and stakeholders throughout the assessment lifecycle.
- Provide guidance and direction to assessment personnel and ensure assigned activities remain aligned with the assessment objectives.
- Support the identification and development of recommendations and mitigation strategies designed to reduce cybersecurity risk.
- Maintain awareness of applicable federal cybersecurity requirements, policies, standards, and HVA assessment methodologies.
Desired SkillsDesired Qualifications- Experience supporting Federal High Value Asset (HVA) cybersecurity assessments.
- Experience with CISA/HACS assessment methodologies.
- Experience with Risk and Vulnerability Assessments (RVA).
- Experience with Security Architecture Reviews (SAR).
- Experience with System Security Engineering (SSE).
- Experience leading penetration testing, vulnerability scanning, network mapping, phishing, wireless, web application, operating system, or database security assessments.
- Experience with federal cybersecurity standards and regulations, including FISMA, FIPS 199/200, NIST SP 800-series publications, and OMB A-130.
- Experience with cloud cybersecurity architecture and assessment.
- CISSP, cloud security, security engineering, or comparable cybersecurity certification.
- Experience working directly with Department of Commerce, NTIA, or other Federal Government cybersecurity organizations.
Additional DetailsSecurity RequirementThis position requires a minimum of a Secret security clearance. An interim Secret clearance is acceptable to begin work, subject to applicable government requirements.
