Senior Cybersecurity & Compliance Advisor

Apogee Global RMS; Washington (District of Columbia); Hybrid; USD 120,000 - 160,000; Full time

Job summary

Apogee Global RMS seeks an experienced Senior Cybersecurity & Compliance Advisor to provide governance, risk management, and compliance guidance supporting a federal simulation and analytics solution. You will bridge technical security with federal requirements for authorization readiness and risk mitigation.

You will collaborate with prime contractor teams, federal stakeholders, and leadership to ensure security controls, documentation, and readiness activities are integrated across design,

Qualifications

• Bachelor’s degree in Cybersecurity, Information Assurance, Information Systems, Computer Science, Risk Management, or related discipline.
• 8+ years of cybersecurity, information assurance, security compliance, risk management, or federal cybersecurity programs.
• Knowledge of FISMA, RMF, and NIST SP 800-53 security controls.
• Experience reviewing security documentation, control evidence, risk assessments, or authorization packages.
• Strong written and verbal communication skills with ability to engage technical and executive audiences.
• Ability to obtain and maintain client-required suitability, including Public Trust if required.

Responsibilities

• Provide cybersecurity governance, risk, and compliance guidance throughout the program lifecycle.
• Advise on federal cybersecurity requirements, policies, and security best practices.
• Support interpretation and implementation of FISMA Moderate requirements and RMF.
• Participate in risk assessments, design reviews, and governance discussions.
• Identify security gaps and mitigation strategies.
• Communicate risks and compliance requirements to technical teams, leadership, and federal stakeholders.
• Review security architectures, control implementations, documentation, and evidence.
• Support preparation for audits, assessments, inspections, and authorization reviews.
• Assist with continuous monitoring and ongoing authorization activities.
• Collaborate with architects, DevSecOps, program managers, and federal security stakeholders.
• Support cybersecurity training and knowledge transfer.

Skills

Cybersecurity governance

Risk assessment

Federal compliance

RMF knowledge

NIST SP 800-53 familiarity

Strong communication

Education

Bachelor’s degree in Cybersecurity, Information Assurance, Information Systems, Computer Science, Risk Management, or related discipline

Tools

FISMA & RMF artifacts reviews

Policy interpretation

Job description

Apogee is seeking an experienced Senior Cybersecurity & Compliance Advisor to provide cybersecurity governance, risk management, and compliance guidance supporting a federal simulation and analytics solution. This role will focus on security advisory, control assessment, authorization readiness, and risk mitigation while complementing the prime contractor’s hands-on DevSecOps and cybersecurity engineering teams.

The successful candidate will help ensure cybersecurity requirements, security controls, documentation, and authorization-readiness activities are integrated throughout the solution lifecycle, including design, development, testing, deployment, and transition.

This position requires a cybersecurity professional who can bridge technical security requirements with federal compliance expectations while effectively communicating risks and recommendations to technical teams, program leadership, and government stakeholders.

Key Responsibilities:

Cybersecurity Governance & Risk Advisory

• Provide cybersecurity governance, risk, and compliance guidance throughout the program lifecycle.
• Advise project teams on federal cybersecurity requirements, policies, and security best practices.
• Support interpretation and implementation of FISMA Moderate requirements and NIST security controls.
• Participate in cybersecurity risk assessments, technical design reviews, and security governance discussions.
• Identify security gaps, residual risks, control deficiencies, and recommended mitigation strategies.
• Communicate cybersecurity risks and compliance requirements to technical teams, leadership, and federal stakeholders.

Compliance & Authorization Support

• Review security architectures, control implementations, security documentation, and technical evidence.
• Support development and review of security documentation, including:
• Security plans
• Control narratives
• Risk assessments
• Plans of Action and Milestones (POA&Ms)
• Authorization-readiness documentation
• Support preparation activities for audits, security assessments, inspections, and authorization reviews.
• Evaluate cybersecurity artifacts for completeness, accuracy, and alignment with federal compliance expectations.
• Assist with continuous monitoring and ongoing authorization activities.

Security Engineering & Technical Review

• Review cybersecurity practices related to:
• Vulnerability management
• Audit logging and monitoring
• Identity and access management
• Incident response
• Configuration management
• Provide guidance on software supply-chain security, including:
• Software Bill of Materials (SBOM)
• Static Application Security Testing (SAST)
• Dynamic Application Security Testing (DAST)
• Dependency analysis
• Vulnerability remediation tracking
• Collaborate with technical architects, DevSecOps engineers, program managers, and federal security stakeholders.
• Support cybersecurity training, awareness, and knowledge-transfer activities.

Qualifications:

• Bachelor’s degree in Cybersecurity, Information Assurance, Information Systems, Computer Science, Risk Management, or related discipline.
• Minimum 8 years of experience in cybersecurity, information assurance, security compliance, risk management, or federal cybersecurity programs.
• Demonstrated knowledge of:
• Federal Information Security Modernization Act (FISMA)
• NIST Risk Management Framework (RMF)
• NIST Special Publication 800-53 security controls
• Experience reviewing security documentation, control evidence, risk assessments, authorization packages, or compliance artifacts.
• Ability to analyze cybersecurity risks and translate technical requirements into actionable recommendations.
• Strong written and verbal communication skills with the ability to engage technical and executive audiences.
• Ability to obtain and maintain client-required suitability requirements, including Public Trust eligibility if required.

Preferred Qualifications:

• CISSP, CISM, CRISC, CAP/CGRC, Security+, or comparable cybersecurity certification.
• Experience supporting FISMA Moderate systems, federal authorization activities, or Authority to Operate (ATO) processes.
• Familiarity with:
• Cloud security practices
• Identity and Access Management (IAM)
• Vulnerability management
• DevSecOps methodologies
• Software supply-chain security
• SBOM, SAST, and DAST processes
• Experience supporting federal cybersecurity assessments, audits, inspections, continuous monitoring, or compliance programs.
• Experience working with federal agencies or government contractors in mission-critical environments.
• Security Requirement: Ability to obtain and maintain client-required suitability clearance or Public Trust determination.
• Location Requirement: Candidates must be able to support periodic onsite meetings in Virginia.