OverviewWe are hiring for a Cybersecurity Manager to lead the cybersecurity program supporting Department of State cloud virtualization services and hosted infrastructure contracts. This individual oversees cybersecurity operations, compliance, risk management, and incident response while ensuring the confidentiality, integrity, and availability of mission-critical systems supporting global operations.
Responsibilities
- Lead cybersecurity operations supporting cloud-hosted and virtualized infrastructure.
- Manage Risk Management Framework (RMF) activities throughout the system lifecycle.
- Develop andmaintainSystem Security Plans (SSPs), POA&Ms, security assessments, and authorization packages.
- Ensure compliance with NIST 800-53, FISMA, FedRAMP, DISA STIGs, and Department of State security policies.
- Direct vulnerability management, continuous monitoring, incident response, andthreatmitigation efforts.
- Coordinate security audits, inspections, penetration testing, and security assessments.
- Manage cybersecurity personnel and provide technical leadership across engineering and operations teams.
- Collaborate with government stakeholders, ISSOs, ISSMs, system administrators, and program management.
- Support Zero Trust implementation, cloud security architecture, and identity and access management initiatives.
- Develop cybersecurity metrics, executive reports, and risk briefings for leadership.
Qualifications
- Bachelor's degree in Cybersecurity, Information Assurance, Computer Science, or related discipline.
- 10+ years of cybersecurity experience, including leadership or management responsibilities.
- Experience supportingDepartmentof State, DoD, or other federal agencies.
- Strong knowledge of RMF, NIST 800-53, FedRAMP, FISMA, Zero Trust, and cloud security.
- Experience with Microsoft Azure Government, AWS GovCloud, VMware environments, and enterprise security tools.
- Current Security+ CE and CISSP certification (or ability to obtain asrequired).
Preferred Certifications
- CISM
- CCSP
- Certified Authorization Professional (CAP)
- GIAC certifications (GCIA, GCIH, GCED)
- Microsoft or AWS Security certifications
Clearance Requirement
- Active security clearance (Secret or Top Secret)