Cybersecurity Compliance Lead (Huntsville, AL)

Integrated Solutions for Systems (IS4S); Huntsville (AL); On-site; USD 80,000 - 110,000; Full time

Job summary

An established industry player is seeking a Cybersecurity Compliance Lead to enhance its cybersecurity program. The ideal candidate will be a Subject Matter Expert with extensive experience in compliance frameworks like NIST and CMMC. This role involves leading internal and external assessments, managing cyber risks, and collaborating with stakeholders to ensure compliance with government regulations. You will play a pivotal role in training employees and interfacing with government entities on cybersecurity matters. Join a forward-thinking company dedicated to maintaining the highest standards of cybersecurity and making a significant impact in the field.

Qualifications

• Expertise in Cybersecurity Compliance with NIST, DFARS, and CMMC.
• Experience in leading cybersecurity assessments and teams.

Responsibilities

• Ensure compliance with CMMC certification and lead cybersecurity assessments.
• Oversee cyber incident management and document risks and mitigation plans.

Skills

Cybersecurity Compliance

Risk Management Framework (RMF)

NIST 800-53

CMMC Certification

Incident Management

Project Management

Team Leadership

Education

Certified CMMC Professional (CCP)

Certified Information Systems Security Professional (CISSP)

Certified Information Security Manager (CISM)

Certified Information Systems Auditor (CISA)

Job description

The Cybersecurity Compliance Lead (CCL) is responsible for maintaining and maturing the company's cybersecurity program. The CCL must be able to demonstrate familiarity and / or experience with security frameworks such as National Institute of Standards (NIST) 800-53 or 800-171, Risk Management Framework (RMF), Cybersecurity Framework (CSF), CIS Critical Security Controls (CIS Controls), Defense Federal Acquisition Regulation Supplement (DFARS), and Cybersecurity Maturity Model Certification (CMMC). The CCL will collaborate and coordinate cyber related activities with company stakeholders, oversee cyber risk and incident management, conduct and coordinate internal and external cybersecurity assessments.

Job Role(s) :

Ensure compliance with CMMC certification

Conduct internal cybersecurity assessments

Lead external cybersecurity assessments

Document existing risks, exposure, and impact

Document risk mitigation, remediation, and continuity plans

Lead and document Configuration Control Board (CCB)

Lead cybersecurity configuration lifecycle management

Oversee cyber incident management

Report cyber incidents to the appropriate government entities

File reports on multiple government systems of record

Ensure all reporting within regulated guidelines

Collaborate and update System Security Plan (SSP)

Collaborate and update policies and procedures

Conduct cybersecurity briefings with company stakeholders

Interface with government entities on cybersecurity matters

Conduct training of employees

Required experience :

Subject Matter Expert (SME) in Cybersecurity Compliance

Experience leading information security engagements

Experience with DFARS, NIST, and CMMC assessments

Experience with leading teams and project management

Must possess or more of the following : Certified CMMC Professional (CCP), Certified CMMC Assessor (CCA), Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified Information Systems Auditor (CISA), or equivalent certification

CCP, CCA, CISSP, CISM, CISA, or equivalent