Cybersecurity Lead / ISSM Support

DecisionPoint | Cortek; United States; Remote; USD 150,000 - 190,000; Full time

Job summary

DecisionPoint | Cortek seeks a Cybersecurity Lead / ISSM Support to guide ENLIST Task 6 cybersecurity delivery and assist the Government ISSM in protecting USMEPCOM systems. The role requires DoD cybersecurity operations experience, the ability to translate findings into actionable risk actions, and remote work with a preference for candidates in the Chicago area.

You will coordinate governance, risk, policy, authorization, and remediation across government and contractor teams, delivering clear

Qualifications

• Active Secret clearance or higher.
• Bachelor's degree in Cybersecurity, Information Systems, Computer Science, or a related field.
• Minimum of 12 years of relevant cybersecurity or information security experience.
• Current CISSP certification.
• Demonstrated experience leading Department of Defense cybersecurity operations.
• Demonstrated ability to translate technical cybersecurity findings into actionable risk recommendations.

Responsibilities

• Lead delivery of ENLIST Task 6 cybersecurity activities and serve as the senior contractor cybersecurity subject matter expert.
• Support the Government ISSM in security governance, risk prioritization, policy maintenance, authorization support, and cybersecurity inspection readiness.
• Advise Government and program leadership on cybersecurity risks, compliance gaps, remediation priorities, and operational impacts.
• Lead coordination of cybersecurity remediation activities across infrastructure, application, service delivery, contractor, and Government teams.
• Support RMF activities and the development, maintenance, review, and validation of authorization documentation.
• Support Authority to Operate and Authority to Connect activities for applicable networks, systems, applications, and software.
• Coordinate implementation and assessment of applicable NIST security controls and DoD cybersecurity requirements.
• Oversee Information Assurance Vulnerability Alert and Information Assurance Vulnerability Management tracking and remediation.
• Coordinate recurring ACAS scans, analyze findings, and track vulnerabilities through remediation or risk acceptance.
• Review Endpoint Security Solutions reports and coordinate resolution of identified security issues.
• Develop, maintain, and monitor Plans of Action and Milestones, corrective-action plans, and other remediation records.
• Monitor corrective actions to ensure findings are assigned, documented, validated, and closed within required timeframes.
• Support certification and accreditation reviews, security control testing, Security Test and Evaluation activities, and development of associated test plans.
• Support Cybersecurity Readiness Inspection preparation, assessment activities, findings management, remediation, and follow-up reporting.
• Maintain and update the program Information Security Plan, cybersecurity policies, SOPs, user guides, memoranda for record, and system interconnection agreements.
• Review and validate system access requests and support enforcement of approved access-control requirements.
• Evaluate systems and assets against applicable NIST, NSA, STIG, and approved desktop or platform security requirements.
• Monitor changes to cybersecurity regulations, policies, technical requirements, and threat conditions, and recommend accordingly.
• Produce accurate cybersecurity status reports, risk summaries, compliance metrics, inspection-readiness assessments, and executive-level briefings.
• Validate the accuracy and completeness of cybersecurity data used in program reports, dashboards, and Government submissions.
• Translate vulnerability data, security-control deficiencies, and technical findings into prioritized and actionable risk recommendations.
• Promote consistent cybersecurity practices and continuous improvement across the ENLIST program.

Skills

Cybersecurity leadership

Risk prioritization

Policy maintenance

Communication of risk

Education

Bachelor's degree in Cybersecurity, Information Systems, Computer Science, or related field

Tools

CISSP

Job description

Overview

DecisionPoint seeks a Cybersecurity Lead / ISSM Support professional to lead Task 6 cybersecurity delivery and support the Government Information System Security Manager (ISSM) in protecting USMEPCOM systems, applications, infrastructure, and information assets.

This Subject Matter Expert will provide leadership across security governance, risk prioritization, policy maintenance, authorization activities, vulnerability remediation, and inspection readiness. The Cybersecurity Lead will coordinate corrective actions across infrastructure, application, contractor, and Government teams while ensuring the accuracy of cybersecurity reporting and the timely closure of identified findings.

The successful candidate will bring extensive experience leading cybersecurity operations in Department of Defense environments and the ability to translate complex technical findings into clear, actionable risk recommendations for Government and program leadership.

This position is remote, with a preference for candidates located in the Chicago area.

Duties & Responsibilities

The Cybersecurity Lead / ISSM Support professional will:

• Lead delivery of ENLIST Task 6 cybersecurity activities and serve as the senior contractor cybersecurity subject matter expert.
• Support the Government ISSM in security governance, risk prioritization, policy maintenance, authorization support, and cybersecurity inspection readiness.
• Advise Government and program leadership on cybersecurity risks, compliance gaps, remediation priorities, and operational impacts.
• Lead coordination of cybersecurity remediation activities across infrastructure, application, service delivery, contractor, and Government teams.
• Support Risk Management Framework activities and the development, maintenance, review, and validation of authorization documentation.
• Support Authority to Operate and Authority to Connect activities for applicable networks, systems, applications, and software.
• Coordinate implementation and assessment of applicable NIST security controls and Department of Defense cybersecurity requirements.
• Oversee Information Assurance Vulnerability Alert and Information Assurance Vulnerability Management tracking and remediation.
• Coordinate recurring Assured Compliance Assessment Solution scans, analyze findings, and track vulnerabilities through remediation or approved risk acceptance.
• Review Endpoint Security Solutions reports and coordinate resolution of identified security issues.
• Develop, maintain, and monitor Plans of Action and Milestones, corrective-action plans, and other remediation records.
• Monitor corrective actions to ensure findings are assigned, documented, validated, and closed within required timeframes.
• Support certification and accreditation reviews, security control testing, Security Test and Evaluation activities, and development of associated test plans.
• Support Cybersecurity Readiness Inspection preparation, assessment activities, findings management, remediation, and follow-up reporting.
• Maintain and update the program Information Security Plan, cybersecurity policies, standard operating procedures, user guides, memoranda for record, and system interconnection agreements.
• Review and validate system access requests and support enforcement of approved access-control requirements.
• Evaluate systems and assets against applicable NIST, National Security Agency, Security Technical Implementation Guide, and approved desktop or platform security requirements.
• Monitor changes to cybersecurity regulations, policies, technical requirements, and threat conditions, and recommend corresponding updates to program controls and procedures.
• Produce accurate cybersecurity status reports, risk summaries, compliance metrics, inspection-readiness assessments, and executive-level briefings.
• Validate the accuracy and completeness of cybersecurity data used in program reports, dashboards, and Government submissions.
• Translate vulnerability data, security-control deficiencies, and technical findings into prioritized and actionable risk recommendations.
• Promote consistent cybersecurity practices, lessons learned, and continuous improvement across the ENLIST program.

Qualifications

Required Qualifications:

• Active Secret clearance or higher.
• Bachelor's degree in Cybersecurity, Information Systems, Computer Science, or a related field.
• Minimum of 12 years of relevant cybersecurity or information security experience.
• Current Certified Information Systems Security Professional (CISSP) certification.
• Demonstrated experience leading Department of Defense cybersecurity operations.
• Demonstrated ability to translate technical cybersecurity findings into actionable risk recommendations.

Preferred Qualifications:

• Experience directly supporting a Government ISSM, Information System Security Off