Information Security Assurance Assistant Group Supervisor

Johns Hopkins Applied Physics Laboratory; Laurel (MD); On-site; USD 105,000 - 290,000; Full time

Job summary

Johns Hopkins Applied Physics Laboratory is seeking an Assistant Group Supervisor (AGS) in Information Security Assurance. This role involves leading a team of cybersecurity professionals, overseeing risk management, and ensuring compliance with federal regulations. Candidates should have a Bachelor's degree in Cybersecurity or a related field, along with at least 7 years of experience in cybersecurity and proven leadership skills. Competitive salary range from $105,000 to $290,000 annually, plus a dynamic work environment fostering professional development.

Qualifications

• Bachelor’s degree in Cybersecurity, Computer Science, or Information Systems.
• At least 7 years of cybersecurity experience with governance and compliance.
• 5 years of team leading experience with sound judgment.

Responsibilities

• Lead risk management and compliance program for cybersecurity.
• Provide oversight of cybersecurity assessments and audits.
• Collaborate with teams for compliance assessments and audits.

Skills

Governance risk management compliance

Cybersecurity leadership

Interpersonal communication

Knowledge of NIST SP 800-171

Data-driven decision making

Education

Bachelor’s degree in Cybersecurity or related field

Tools

Security compliance frameworks

Data analytics tools

Risk assessment tools

Job description

Are you passionate about being on a team of highly skilled, motivated and dedicated professionals charged with protecting sensitive data while supporting the JHU/APL mission?

Do you want to integrate cybersecurity and compliance within our enterprise, sector and department networks and protect our Nation’s sensitive information? The JHU/APL is looking for an Assistant Group Supervisor (AGS) in Information Security Assurance (ISA) to partner with the Group Supervisor in leading a high performing organization of cybersecurity professionals.

Shared Leadership Model

• Partner closely with the Group Supervisor to align strategy, priorities, and execution across the ISA Group
• Share responsibility for overall group performance, section leadership, and staff engagement
• Provide full leadership coverage in the absence of the Group Supervisor and across all ISA functions as needed
• Ensure seamless integration and coordination between all sections and responsibility pillars

Operations Leadership

• Lead the maturation of ISA’s cybersecurity risk management and compliance program
• Provide strategic oversight of the Laboratory's compliance posture with government regulations, primarily CMMC and NIST SP 800‑171
• Collaborate with business areas and technical staff to support compliance assessments and act as a liaison with Certified Third‑Party Assessment Organizations (C3PAOs)
• Drive a risk‑based, “how do we get to yes” approach balancing compliance requirements, operational needs, and practical risk management
• Establish and maintain processes for risk identification, assessment, acceptance, and mitigation
• Provide oversight for security assessments, audits, and continuous monitoring activities
• Lead the Laboratory's CMMC assessment program, including oversight of C3PAO relationships and preparation for annual affirmations
• Provide guidance on cybersecurity requirements in RFIs, RFPs, and contracts to ensure compliance obligations are clearly understood and addressed
• Lead the buildout of posture monitoring, configuration management, and cloud compliance capabilities across ISA sections
• Ensure continuous monitoring principles are operationalized and aligned with both compliance requirements and broader threat detection and response
• Lead hiring and development of section leadership and staff as the sections mature

Organizational Leadership

• Ensure Section Supervisors effectively manage staff performance, development, and accountability within their security functions
• Identify and develop high‑potential staff and build leadership bench strength across the ISA Group
• Provide meaningful opportunities for growth aligned with organizational needs
• Provide expert guidance on complex risk decisions, including exception handling and compensating controls
• Partner with threat detection and incident response leadership to maintain feedback loops between detection findings and control improvements
• Leverage data and analytics to identify systemic risks, control gaps, and trends across the security program
• Provide executive management awareness of the ongoing state of compliance across the enterprise

Qualifications

• Have a Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, a related field, or requisite experience
• Have at least 7 years of cybersecurity experience with significant governance, risk, and compliance experience
• Have at least 5 years of experience leading or managing teams with sound judgment and discretion
• Have strong working knowledge of NIST SP 800‑171 and applicable federal cybersecurity compliance frameworks
• Demonstrate the ability to translate policy and regulatory requirements into actionable security practices
• Have experience balancing mission needs with security and compliance in complex environments
• Have familiarity with cloud security architectures, identity‑first security models, or modern data platforms
• Have experience using data and metrics to drive risk‑based decisions
• Possess excellent interpersonal, written, and oral communication skills, operating effectively at all leadership levels
• Be able to obtain a Secret security clearance; eligibility requires U.S. citizenship

Additional Qualifications

• Have a Master’s degree in Cybersecurity, Computer Science, Information Systems, a related field, or requisite experience, including significant cybersecurity leadership spanning GRC and operations
• Experience standing up or restructuring security operations functions, defining mission scope, and building teams
• Experience leading organizational transformation or modernization initiatives within a cyber program
• Experience integrating security telemetry, behavioral analytics, or automated tooling into compliance or risk workflows
• Experience implementing quantitative or risk‑based decision frameworks
• Hold relevant professional certifications such as CISSP, CISM, or CRISC
• Understand attack methodologies used by Nation‑State actors and the ATT&CK matrix to assess risk

Minimum Rate

§ $105,000 Annually

Maximum Rate

§ $290,000 Annually

All qualified applicants will receive consideration for employment without regard to race, creed, color, religion, sex, gender identity or expression, sexual orientation, national origin, age, physical or mental disability, genetic information, veteran status, occupation, marital or familial status, political opinion, personal appearance, or any other characteristic protected by applicable law. APL is committed to providing reasonable accommodation to individuals of all abilities, including those with disabilities. If you require a reasonable accommodation to participate in any part of the hiring process, please contact [e-mail].

Applications are accepted on a rolling basis.