Cybersecurity Lead

SkyePoint Decisions; United States; Remote; USD 150,000 - 230,000; Full time

Benefits offered by this job

Remote position

Job summary

SkyePoint Decisions seeks a Cybersecurity Lead to support the DoE FSA CPSS program, providing senior technical and operational leadership for IHE cybersecurity activities handling FSA data. The role oversees compliance, risk management, breach response, and education-sector outreach across institutions nationwide.

You will coordinate multiple workstreams, guide incident response, and ensure effective governance, reporting, and stakeholder engagement in a remote capacity.

Qualifications

• Senior-level cybersecurity leadership with Federal/education contractor experience.
• Coordinate cross-functional workstreams and incident response activities.
• Knowledge of CUI, FTI, PII handling and relevant compliance frameworks.

Responsibilities

• Provide senior leadership for IHE cybersecurity activities supporting FSA data.
• Coordinate four primary IHE cybersecurity workstreams: compliance, risk, response, outreach.
• Lead incident-response and breach-management support for IHEs handling FSA information.
• Oversee assessment plans, risk rating, and gap closure in information security programs.
• Ensure reporting, governance participation, and rapid access request fulfillment.

Skills

Cybersecurity leadership

Program management

FISMA/controls

Incident response

Stakeholder engagement

Education

Bachelor's degree in Computer Science or Information Security

Tools

Splunk

GRC tools

NIST SP 800-53

Job description

SkyePoint Decisions is a leading Cybersecurity Architecture and Engineering, Critical Infrastructure and Operations, and Applications Development and Maintenance IT service provider headquartered in Dulles, Virginia with operations across the U.S. We provide innovative enterprise-wide solutions as well as targeted services addressing the complex challenges faced by our federal government clients. Our focus is on enabling our clients to deliver their mission most efficiently and effectively – anytime, anywhere, securely. We combine technical expertise, mission awareness, and an empowered workforce to produce meaningful results.

This is a contingent position based upon contract win.

SkyePoint Decisions is seeking a Cybersecurity Lead to join our team supporting the Department of Education’s (DoED) Federal Student Aid (FSA) Cybersecurity and Privacy Support Services (CPSS).

The Senior Institutions of Higher Education (IHE) Cybersecurity Lead provides senior technical, operational, and program leadership for FSA cybersecurity activities supporting Institutions of Higher Education that handle Federal Student Aid data. The Lead oversees and coordinates IHE cybersecurity compliance, breach and incident response, cyber risk management, remediation, audit oversight, technical guidance, and education-sector outreach. The position serves as a senior cybersecurity resource supporting FSA and participating institutions in protecting sensitive Federal information and addressing cybersecurity risks involving Controlled Unclassified Information (CUI), Federal Tax Information (FTI), and Personally Identifiable Information (PII).

This is a remote position.

Responsibilities:

IHE Cybersecurity Program Leadership

• Provide senior technical and operational leadership for cybersecurity activities supporting IHEs that handle FSA information.
• Coordinate activities across the four primary FSA IHE cybersecurity workstreams:
• Cybersecurity Compliance & Audit Oversight
• Cybersecurity Threat Risk Management
• Coordinate cybersecurity activities among FSA offices, FSA contractors, IHEs, and affiliated organizations.
• Achieve reporting and transparency metrics, to include compliance reporting, dashboard accuracy, and communication responsiveness.
• Achieve customer and stakeholder experience metrics, including stakeholder satisfaction, governance participation, and speed of access request fulfillment.
• Provide senior-level cybersecurity guidance to FSA stakeholders and participating institutions.
• Promote consistency and quality across compliance assessments, incident response, risk management, remediation, and cybersecurity outreach activities.

Incident & Breach Response

• Lead and coordinate incident-response and breach-management support for IHEs handling FSA information.
• Provide incident reporting and handling guidance to help IHEs appropriately contain, remediate, and recover from cybersecurity incidents.
• Coordinate remediation and response activities with reporting institutions.
• Oversee the categorization, analysis, documentation, tracking, and management of IHE cybersecurity cases through closure.
• Coordinate breach-response activities involving affected FSA offices, contractors, IHEs, and affiliated organizations.
• Evaluate incident information to identify cybersecurity risks, compliance concerns, and necessary remediation actions.
• Monitor corrective actions and remediation activities through resolution.

Cybersecurity Compliance & Assessment

• Lead and support cybersecurity compliance assessments of institutions and systems that handle FSA data.
• Evaluate the adequacy of administrative, technical, and physical safeguards and identify cybersecurity and compliance gaps.
• Oversee development of assessment plans addressing methodology, data collection, sampling, reporting timelines, and risk-rating methodology.
• Evaluate the existence and effectiveness of institutional information-security programs.
• Review cybersecurity compliance and audit information and assess corrective-action plans.
• Evaluate safeguards related:
• Identity and access management
• Data classification and inventory
• Encryption of data in transit and at rest
• Change management and secure development
• Logging, monitoring, and incident response
• Vendor and third-party risk