Senior Cyber Threat Planning

PD Inc; Maryland; On-site; USD 110,000 - 160,000; Full time

Job summary

PD Inc in Fort Meade, MD is seeking a Senior Cyber Threat Planning professional to lead audit and cybersecurity readiness activities, requiring an active Secret clearance. You will coordinate DISA audits, manage artifacts, and deliver comprehensive audit deliverables while collaborating with stakeholders across programs.

The role involves providing guidance on audit techniques, risk assessments, and security posture improvements for DISA-supported initiatives.

Qualifications

• Bachelor's degree in IT, engineering, science, or mathematics.
• Five+ years of audit methodologies and cybersecurity experience.
• Three+ years of Microsoft Office experience.
• Active Secret Clearance required with DISA audit familiarity.

Responsibilities

• Coordinate, schedule, and manage ~150 DISA audits annually, including meetings and artifacts.
• Provide expertise on cybersecurity readiness assessments and audit research.

Skills

Audits

Cybersecurity

Audit methodologies

Stakeholder coordination

Education

Bachelor's degree in IT, engineering, science, or mathematics

Tools

Microsoft Office

Job description

Job Title: Senior Cyber Threat Planning

Location: Fort Meade, MD 20755
Clearance Level: Active Secret Clearance
Job Type: Full-Time

Education Requirement

• Bachelor's degree with major in IT, engineering, science, or mathematics

Years of Experience

• Five + years of relevant/recent experience with audit methodologies and cybersecurity experience.
• Three + years of relevant/recent experience with Microsoft Office Products

Certification Requirements

• Current 8570/8140 requirement certification
• Certified Information Systems Auditor (CISA), Certified Information Systems Manager (CISM) or a Certified Information Systems Security Professional (CISSP) certification.

Clearance Requirements

• Active Secret Clearance

Responsibilities

Subtask 1 – Audits

The contractor shall coordinate, schedule, and manage all DISA supported audit activities, to include moderating meetings, requesting blackout dates, and facilitating all support requirements with audit stakeholders for approximately 150 audits annually. The contractor shall manage all RFI, audit interview participation, compelling evidence, and updates to and from audit stakeholders. Submit Control Objectives (CO)s and asset list (when available) to audit stakeholders for collaborative review and updates. Provide onsite expertise for all DISA supported audits. Identify and maintain audit scope and ensure the audit activities remain within scope. Manage all follow up activities for post audit remediation and reporting. Manage and maintain the audit lessons learned to include planning, scheduling, and delivering final product. Use DISA approved tools to obtain, track, and validate asset vulnerability data. Collect compelling evidence and findings remediation artifacts and store in DISA's designated collaboration tool. Maintain, update, and version control the Meeting Request List (MRL) and Document Request List (DRL) form via DISA's designated collaboration tool.

Subtask 2 – Operations

The contractor shall provide expertise with operational and financial cybersecurity readiness assessments. Provide expertise in regard to special projects, to include research on audit techniques. Collect and disseminate cybersecurity practices as related to audit activities. Provide comments and recommendations for incorporation in formal audit reports, audit programs and audit risk analysis. Facilitate self-assessments and report gaps and deficiencies on cybersecurity posture, to include the reliability and integrity of information systems, safeguarding of assets, compliance with policies and procedures, and effective and efficient use of resources.

Deliverables

• Meeting Minutes Report
• Communication plan
• Gap analysis
• MRL/ DRL responses/artifact requests
• Submit CO and asset list (when available) to audit stakeholders
• Also includes Deliverables that apply to all tasks listed in section 6, Performance Requirements