USAF - CODE - CIO Task Lead

cFocus Software Incorporated; Linthicum (MD); On-site; USD 150,000 - 190,000; Full time

Job summary

cFocus Software Incorporated seeks a CODE – CIO Task Lead to join our program supporting the United States Air Force (USAF). This on-site role in Linthicum Heights, MD requires an active TS/SCI clearance and leadership to guide IT management, strategic planning, and workforce initiatives across the organization.

The role emphasizes coordinating security governance, risk management, and incident response while ensuring compliance with NIST, ISO 27001, and related frameworks within a high-demand

Qualifications

• Active TS/SCI clearance required.
• B.S. Computer Science, Information Technology, or related field.
• At least 5 years of IT leadership and accountability experience (CIO-level).
• At least 5 years of IT strategic planning experience.

Responsibilities

• Oversee contractor personnel and subcontractors delivering Task 9 cybersecurity services and coordinate across teams, dependencies, schedules, and resources to meet PWS requirements.
• Serve as the primary CODE contractor contact; facilitate Government–contractor communications, track requirements, monitor performance and quality.

Skills

CIO leadership

IT strategic planning

IT workforce planning

IT budgeting

IT investment management

Information security

Digital accessibility

Contractor management

Education

B.S. Computer Science / Information Technology

Job description

cFocus Software seeks a CODE – CIO Task Lead to join our program supporting the United States Air Force (USAF). This position is on-site in Linthicum Heights, MD. This position requires an Active TS/SCI clearance.

Qualifications:

• Active TS/SCI clearance
• B.S. Computer Science, Information Technology, or a related field
• Individual IT leadership and accountability at least 5 years of experience (e.g., CIOs are responsible and accountable for the effective implementation of IT management responsibilities).
• IT strategic planning at least 5 years of experience (e.g., CIOs are responsible for strategic planning of all IT management functions).
• IT workforce at least 5 years of experience (e.g., CIOs are responsible for assessing agency IT workforce needs and developing strategies and plans for meeting those needs).
• IT budgeting at least 5 years of experience (e.g., CIOs are responsible for the processes for all annual and multi-year IT planning, programming, and budgeting decisions).
• IT investment management at least 5 years of experience (e.g., CIOs are responsible for the process of managing, evaluating, and assessing how well the agency is managing its IT resources).
• Information Security and Privacy at least 5 years of experience (e.g., CIOs are responsible for establishing, implementing, and ensuring compliance with an agency-wide information security program).
• Digital Equity and Accessibility at least 5 years of experience (e.g., CIOs serve as a champion for digital equity for the workforce by ensuring digital accessibility of information and telecommunication technologies).

Duties:

• Manage and oversee contractor personnel and subcontractors delivering Task 9 cybersecurity services; coordinate across teams, dependencies, schedules, and resources to meet PWS requirements.
• Serve as the primary contractor contact for CODE; facilitate Government and contractor communications, document and track requirements and activities, monitor performance and quality, and **
• Implement and maintain appropriate security and compliance frameworks, including NIST, ISO 27001, or CMMC, and coordinate internal and external security audits to validate control effectiveness.
• Oversee penetration testing conducted in accordance with NIST SP 800-115, weekly vulnerability scans and CORA-scored reporting, and continuous vulnerability remediation, patching, and secure configuration management.
• Direct coordination of intelligence-driven threat hunting and monitoring across DC3 IT and operational technology environments; ensure anomalies are investigated, response decisions are supported, and required reports are delivered within PWS timeframes.
• Oversee enterprise governance, risk, and compliance work, including RMF and ATO or Assess-Only packages, eMASS submissions, continuous monitoring, STIG compliance, POA&Ms, and enterprise risk recommendations prepared for Government decision.
• Lead coordination during major security incidents, including detection, escalation, containment, eradication, and recovery; oversee maintenance of incident response policies and procedures.
• Oversee the post-IOC Security Operations Center as the hub for defensive operations, security event analysis, and coordination with CSSPs, the AFCYBER Operations Center, and higher headquarters authorities.
• Ensure cybersecurity review of infrastructure as code and configuration as code changes before production deployment, and oversee adoption of security improvements based on assessed benefits, risks, and implementation approaches.
• Oversee selection and performance of third-party security vendors and ensure acquisitions meet organizational security standards; lead organization-wide cybersecurity education and training to promote a security-first culture.
• Assist the Government with PWS-related financial and business processes and exercise delegated contractor authority to resolve issues and commit the prime contractor organization where appropriate.