Cybersecurity Lead

About the Position:

The Cybersecurity Lead is responsible for overseeing the design, implementation, and management of an organization’s cybersecurity strategy and infrastructure. This role involves leading a team of cybersecurity professionals to protect the organization's information systems, network, and data from potential threats, ensuring compliance with relevant security regulations and standards. The Cybersecurity Lead will coordinate risk management efforts, respond to security incidents, and work proactively to secure all aspects of the organization’s digital presence.

Key Responsibilities:

Cybersecurity Strategy & Leadership:

• Develop and implement a comprehensive cybersecurity strategy aligned with the organization’s business objectives and risk management framework.
• Lead a team of cybersecurity professionals, providing direction, guidance, and support on security-related issues.
• Ensure cyber-related tasks are performed efficiently, accurately, on time, and in compliance with all federal, state, and local regulations and guidelines.
• Stay informed on the latest cybersecurity trends, threats, and technologies to ensure the organization’s security posture remains robust and up to date.
• Enforce National Institute of Standards and Technology (NIST) RMF standards as well as Clinger Cohen Act (CCA) and Federal Information Security Management Act (FISMA) regulations.
• Ensure non-compliant controls are being addressed in a timely manner (IAW DAF standards and best practices).
• Maintain situational awareness of all equipment, network protocols, and data within the affected security boundary.

Risk Management & Threat Assessment:

• Conduct regular risk assessments to identify potential vulnerabilities, threats, and areas of concern in the organization's infrastructure.
• Develop and execute risk mitigation strategies, ensuring timely resolution of security gaps and vulnerabilities.
• Implement and manage security monitoring tools to detect and respond to cyber threats in real-time.
• Collect initial vulnerability scanning deliverables, specifically Assured Compliance Assessment Solution (ACAS) scans and Security Technical Implementation Guide (STIG) checklists.
• Contribute to the development, execution, and delivery of a supply chain risk management (SCRM) Plan with an approach incorporating the Cybersecurity and Infrastructure Security Agency (CISA) Secure Software Development Attestation Form.

Incident Response & Investigation:

• Lead the response to cybersecurity incidents, including data breaches, malware attacks, and network intrusions.
• Investigate security incidents, analyze root causes, and implement corrective actions to prevent future occurrences.
• Develop and conduct post-incident analysis to improve the organization's security policies and procedures.

Security Architecture & Infrastructure:

• Oversee the design, implementation, and maintenance of secure network architectures, firewalls, intrusion detection/prevention systems, and endpoint security solutions.
• Collaborate with IT teams to ensure security controls are effectively integrated into the infrastructure, cloud environments, and application development processes.
• Ensure that security systems are properly configured and continually updated to defend against emerging threats.

Compliance & Regulatory Management:

• Ensure the organization complies with relevant cybersecurity regulations, standards, and best practices (e.g., GDPR, HIPAA, NIST, ISO 27001).
• Develop and maintain cybersecurity policies and procedures to ensure compliance with internal and external requirements.
• Conduct regular security audits, assessments, and compliance checks to maintain certifications and identify areas of improvement.

Employee Training & Awareness:

• Lead cybersecurity training programs for employees, raising awareness about potential threats such as phishing, social engineering, and other forms of cyberattacks.
• Provide guidance on secure practices for using IT systems, managing passwords, and maintaining privacy and confidentiality.

Collaboration & Communication:

• Work closely with senior management and other departments (e.g., IT, legal, operations) to integrate cybersecurity into business processes and ensure alignment with organizational goals.
• Communicate security risks and mitigation strategies to non-technical stakeholders, making complex issues understandable.
• Serve as the primary point of contact for all cybersecurity-related matters, providing guidance and leadership across the organization.

Reporting & Documentation:

• Prepare and present regular reports on logistics performance, inventory status, cost analysis, and potential issues to senior management.
• Maintain accurate records of logistics activities, transactions, and communications with external partners.
• Ensure compliance with internal reporting requirements and industry regulations.
• Provide input, as needed, to cybersecurity content associated Contract Data Requirements List (CDRL) deliverables and providing input to the Monthly Status Reports (MSR).

Vulnerability & Patch Management:

• Oversee vulnerability management processes, ensuring regular scanning and timely patching of systems, software, and applications.
• Work with IT teams to ensure vulnerabilities are addressed promptly, with minimal impact to operations.

Continuous Improvement & Innovation:

• Lead the continuous improvement of security processes, tools, and strategies to enhance the organization’s cybersecurity resilience.
• Evaluate and recommend new cybersecurity technologies, solutions, and best practices to keep the organization’s security posture ahead of evolving threats

Cybersecurity Expertise:

• In-depth knowledge of cybersecurity principles, frameworks, and technologies (e.g., firewalls, encryption, VPNs, IDS/IPS, SIEM).
• Strong understanding of risk management, incident response, vulnerability management, and security operations.
• Experience with cloud security, network security, endpoint protection, and securing distributed systems.
• Experienced working within the DoD Risk Management Framework (RMF) process.
• Ability to interact with USG RMF personnel and participate in Cybersecurity meetings.

Leadership & Management:

• Proven ability to lead, mentor, and manage a team of cybersecurity professionals.
• Strong decision-making, problem-solving, and organizational skills to lead effective security programs and projects.

Incident Response & Forensics:

• Expertise in leading incident response, digital forensics, and root cause analysis.
• Ability to manage security incidents effectively, providing timely resolution and reporting.

Regulatory Knowledge:

• Familiarity with cybersecurity compliance regulations and frameworks, including NIST, ISO 27001, GDPR, and industry-specific standards (e.g., HIPAA, PCI DSS).

Certifications (Preferred, but not required):

• Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), or similar certifications.
• Other relevant security certifications such as CompTIA Security , Certified Cloud Security Professional (CCSP), or AWS Certified Security Specialty.

Communication & Analytical Skills:

• Strong communication skills, both verbal and written, to articulate complex security concepts to stakeholders.
• Excellent analytical and troubleshooting abilities to identify security weaknesses and develop effective solutions.

Education and Experience:

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field.
• 7 years of experience in cybersecurity, with at least 3 years in a leadership or senior technical role.
• Proven experience managing security operations, incident response, and security risk management.
• Certified Ethical Hacker (CEH) credential would be nice to have.

Working Conditions:

• Occasional after-hours work may be required in the event of a security breach or ongoing incident.
• The role may involve on-call availability to respond to security incidents outside of standard working hours.
• Some travel may be required for audits, training, or industry conferences.