Senior Cybersecurity Policy & RMF Risk Lead

Mayvin, Inc.; Alexandria (VA); Sur place; USD 110 000 - 160 000; Plein temps

Résumé du poste

Mayvin, Inc. is seeking a Senior Cybersecurity Analyst to serve as a subject-matter expert in Cybersecurity Policy, Planning, and RMF implementation. This role tracks ATO status and RMF functions, reviews cybersecurity policies, and guides integration of cybersecurity engineering principles throughout system lifecycles.

The incumbent will act as a trusted consultant to leadership, bridging gaps between compliance requirements, operational readiness, and technical solutions.

Responsabilités

• Review cybersecurity policies, procedures, and directives to ensure compliance with DoN, DoD, and federal regulations (e.g., DoD 8500-series, NIST SP 800-series, Clinger Cohen Act, and various Defense Acquisition polices.).
• Advise program leadership on emerging cybersecurity directives, regulatory and statutory changes, and policy impacts to mission systems.
• Monitor and track system authorization (ATO) efforts under the NAVSEA Risk Management Framework and provide early warnings of issues or when progress may be off track.
• Monitor and track various data calls for compliance in accordance with specific directives (OPORD, TASKORD, etc.).
• Conduct and review system and program risk assessments to identify cybersecurity risks and provide strategies for remediation and mitigation.
• Lead strategic initiatives to strengthen cybersecurity posture across programs, balancing operational effectiveness with security imperatives.
• Represent the program office in high-level working groups, interagency forums, and technical exchanges.
• Partner with program managers, system engineers, and contractors to ensure cybersecurity is integrated throughout acquisition and development phases.
• Participate in the change management process, including conducting security impact analyses and making recommendations to program management for approvals.

Description du poste

Mayvin, Inc. is seeking a Senior Cybersecurity Analyst to serve as a subject-matter expert in Cybersecurity Policy, Planning, and RMF implementation. This role tracks ATO status and RMF functions, reviews cybersecurity policies, and guides integration of cybersecurity engineering principles throughout system lifecycles.

The incumbent will act as a trusted consultant to leadership, bridging gaps between compliance requirements, operational readiness, and technical solutions.