Provides ad hoc SME technical advisory support to NCUA leadership on emerging threats policy, and legislative impacts; and oversees the cybersecurity awareness and training program (materials, outreach, tracking, National Cybersecurity Awareness Month)
Maintains and matures the NCUA eGRC (RSA Archer) solution, produces KPI/KRI dashboards, and drafts responses to federal reporting requirements (FISMA, HVA, ad hoc inquiries)
Required Skills/Abilities
Possess a minimum of 8-10 years of experience implementing and managing information assurance, risk management, and security compliance programs.
Must have demonstrated experience with security control assessments, vulnerability management, policy development, and compliance activities aligned to NIST RMF, FISMA, and related federal cybersecurity frameworks.
At least 3-5 years of experience leading security specialists or assessment teams is required.
U.S. citizenship required
Nice to Have Skills
Preferred certifications include CISSP, CISM, CAP, and relevant GIAC credentials such as GSLC or GSEC, with cloud-security certifications such as AZ-500 or AWS Security Specialty considered advantageous.
Education and Experience:
Bachelor of Science in Information Technology, Cybersecurity, Computer Science, or a related discipline
Possess a minimum of 8-10 years of experience implementing and managing information assurance, risk management, and security compliance programs
Travel Requirement:
Minimal
Clearance Requirement:
U.S. citizenship required (Non-Sensitive/High Risk).
Salary Range: The salary range for this position represents Dynamo's good-faith estimate of the compensation expected to be offered at the time of posting. Actual compensation will be determined based on several factors, including, but not limited to, the responsibilities of the role, the candidate's experience, skills, education, work location, and internal equity.
