Cybersecurity Compliance Lead (Huntsville, AL)

Is4s; Huntsville (AL); On-site; USD 80,000 - 110,000; Full time

Job summary

An established industry player is seeking a Cybersecurity Compliance Lead to enhance and maintain their cybersecurity program. This pivotal role involves ensuring compliance with various security frameworks, conducting assessments, and managing cyber incidents. The ideal candidate will have a strong background in cybersecurity compliance, risk management, and team leadership, along with the ability to interface with government entities. Join this forward-thinking company and play a crucial role in safeguarding critical information while leading a dedicated team in a dynamic environment.

Qualifications

• Expertise in cybersecurity compliance frameworks and risk management.
• Proven experience in leading security assessments and engagements.

Responsibilities

• Ensure compliance with CMMC certification and conduct cybersecurity assessments.
• Manage cyber incident response and document risk mitigation plans.

Skills

Cybersecurity Compliance

Risk Management Framework (RMF)

NIST 800-53

CMMC

Team Leadership

Project Management

Education

CCP

CCA

CISSP

CISM

CISA

Job description

Cybersecurity Compliance Lead (Huntsville, AL)

Description: The Cybersecurity Compliance Lead (CCL) is responsible for maintaining and maturing the company's cybersecurity program. The CCL must be familiar with security frameworks such as NIST 800-53 or 800-171, RMF, CSF, CIS Controls, DFARS, and CMMC. The CCL will coordinate cyber activities with stakeholders, oversee risk and incident management, and conduct cybersecurity assessments.

Job Role(s):

1. Ensure compliance with CMMC certification
2. Conduct internal cybersecurity assessments
3. Lead external cybersecurity assessments
4. Document risks, exposure, and impact
5. Document risk mitigation, remediation, and continuity plans
6. Lead and document Configuration Control Board (CCB)
7. Manage cybersecurity configuration lifecycle
8. Oversee cyber incident management
9. Report cyber incidents to government entities
10. File reports on government systems of record
11. Ensure compliance with reporting guidelines
12. Update System Security Plan (SSP) and policies
13. Conduct cybersecurity briefings and training for stakeholders and employees
14. Interface with government entities on cybersecurity issues

Required experience:

• SME in Cybersecurity Compliance
• Experience leading security engagements
• Experience with DFARS, NIST, and CMMC assessments
• Team leadership and project management experience
• Certifications: CCP, CCA, CISSP, CISM, CISA, or equivalent

Minimum Education Requirement: CCP, CCA, CISSP, CISM, CISA, or equivalent

IS4S is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration without regard to race, color, religion, sex, national origin, age, veteran status, disability, sexual orientation, or gender identity.

Ability to obtain Top Secret clearance required.