Senior Cybersecurity Advisor (Expert/Master)

Candidate must have a TS/SCI

We are seeking an experienced Senior Cybersecurity Advisor to provide executive-level cybersecurity leadership in support of enterprise security strategy, governance, risk management, and compliance initiatives. The successful candidate will serve as a trusted advisor to senior leadership, guiding cybersecurity policy, Zero Trust implementation, RMF/ATO activities, DevSecOps integration, and enterprise security modernization efforts across complex government environments.

This position requires extensive experience working with executive stakeholders to develop cybersecurity strategies that align mission objectives with federal security requirements while enhancing the organization's overall cybersecurity posture.

Key Responsibilities

Cybersecurity Strategy & Governance
• Advise executive leadership on enterprise cybersecurity strategy, governance, and policy development.
• Develop cybersecurity priorities aligned with organizational mission objectives and federal requirements.
• Recommend governance improvements that strengthen enterprise security and operational resilience.
• Provide executive-level briefings, metrics, and strategic recommendations.

Risk Management & Compliance
• Lead Risk Management Framework (RMF) implementation and Authorization to Operate (ATO) activities.
• Support continuous monitoring, security authorization, and compliance initiatives.
• Improve ATO processes and promote reciprocity across enterprise systems.
• Develop and maintain cybersecurity policies, standards, and implementation guidance.

Zero Trust & Security Architecture
• Advise on Zero Trust architecture, planning, and implementation.
• Provide guidance on:

o Identity and Access Management (IAM)

o Network segmentation

o Encryption

o Secure access solutions
• Ensure security architectures align with NIST and federal cybersecurity standards.

Incident & Vulnerability Preparedness
• Provide strategic guidance for:

o Incident response planning

o Vulnerability management

o Security Operations Center (SOC) operations

o Security Information and Event Management (SIEM) capabilities
• Recommend improvements to enterprise cyber defense and operational readiness.

DevSecOps & Secure Engineering
• Integrate cybersecurity throughout the system development lifecycle.
• Advise acquisition teams on security-by-design principles.
• Support DevSecOps implementation and secure software development practices.
• Collaborate with engineering teams to embed cybersecurity into modern cloud and software architectures.

Executive Reporting
• Develop executive dashboards, cybersecurity metrics, and strategic reports.
• Present cybersecurity risk assessments and recommendations to senior executives.
• Coordinate cybersecurity initiatives across multiple organizations and stakeholders.

Required Qualifications

Experience
• Experience advising executive leadership on:

o Enterprise cybersecurity strategy

o Governance

o Risk management

o Enterprise security modernization
• Strong knowledge of:

o Risk Management Framework (RMF)

o NIST Cybersecurity Framework (CSF)

o NIST SP 800-53

o Zero Trust Architecture

o Identity and Access Management (IAM)
• Experience improving Authorization to Operate (ATO) processes and promoting reciprocity.
• Experience developing cybersecurity policies, standards, and implementation guidance.

Desired Qualifications
• Experience overseeing:

o Incident Response

o Vulnerability Management

o Security Operations Centers (SOC)

o Security Information and Event Management (SIEM)
• Experience integrating cybersecurity into acquisition and systems engineering processes.
• Experience implementing Security-by-Design and DevSecOps practices.
• Experience briefing executive leadership and coordinating initiatives across multiple organizations.
• Strong communication and leadership skills with the ability to influence senior decision-makers.

Education & Experience Requirements

Education - Minimum Years of Relevant Experience

Master's Degree in Business or STEM - 6 Years

Bachelor's Degree in Business or STEM - 8 Years

High School Diploma or Equivalent - 12 Years

Preferred Technical Knowledge

Candidates should demonstrate knowledge of:
• NIST Cybersecurity Framework (CSF)
• NIST SP 800-53
• Risk Management Framework (RMF)
• Authorization to Operate (ATO)
• Continuous Monitoring (ConMon)
• Zero Trust Architecture
• Identity, Credential, and Access Management (ICAM)
• DevSecOps
• Security-by-Design
• Vulnerability Management
• Incident Response
• SOC/SIEM Operations
• Enterprise Risk Management
• Cybersecurity Governance
• Federal Information Security policies and guidance

Key Competencies
• Executive Leadership
• Strategic Thinking
• Cyber Risk Management
• Enterprise Security Architecture
• Policy Development
• Regulatory Compliance
• Cross-Functional Collaboration
• Executive Communication
• Problem Solving
• Decision Making
• Mission Focus
• Customer Engagement

Clearance

Required: Active TS/SCI security clearance.

Ideal Candidate

The ideal candidate is a senior cybersecurity leader with a proven track record of advising executive leadership on enterprise cybersecurity strategy, governance, and risk management. They possess deep expertise in RMF, Zero Trust, DevSecOps, and federal cybersecurity compliance, while demonstrating the ability to influence strategic decisions, lead cross-functional initiatives, and drive continuous improvement across complex enterprise environments.

The proposed salary range for this position in Maryland is 128,000 to 270,000. Final salary will be determined based on various factors. Our comprehensive benefit offerings include healthcare, retirement plan, paid disability and life insurance programs, employee assistance program, paid and unpaid leave programs, education assistance, and wellness initiatives.