application security engineer

aws cloud security assurance manager Jobs in Washington

aws cloud security assurance manager

cyber threat intelligence analyst (ts/sci req) Jobs in Washington

cybersecurity program manager (grc) Jobs in Washington

cybersecurity program manager (grc)

cybersecurity solutions architect Jobs in Washington

cybersecurity solutions architect

cybersecurity compliance sme

Gunnison Consulting Group, Inc.

<div>Description:
<p><i>
Salary: $115,000 - $125,000/year</i></p><p>
We are seeking a knowledgeable and detail-oriented Cybersecurity Compliance Subject Matter Expert (SME) to support our Department of State client. This role will support the continued maturation of the customer&rsquo;s cybersecurity program by contributing expert guidance on cyber policy, compliance, risk management, and operational reporting. The ideal candidate combines deep compliance expertise with strong analytical and data visualization skills to support informed decision-making through metrics and dashboards.</p><p><b>
Duties and Responsibilities</b></p><ul><li>
Support the development, interpretation, and implementation of cybersecurity policies and procedures within a secure software development environment, ensuring alignment with applicable security framework series and federal requirements.</li><li>
Serve as a cybersecurity compliance SME for U.S. Government contracting environments, maintaining up-to-date knowledge of relevant regulations, standards, and policies and advising stakeholders on their application.</li><li>
Conduct risk assessments, identify security control gaps and vulnerabilities, and recommend mitigation strategies to strengthen security posture across development and operational environments.</li><li>
Support compliance monitoring activities, including preparation for audits, assessments, and inspections; assist in identifying findings and contributing to remediation planning and documentation.</li><li>
Collaborate with security, engineering, and program stakeholders to support the development and delivery of role-based cybersecurity training (e.g., SO, ISSO, ISSM) and security awareness initiatives.</li><li>
Develop, maintain, and analyze cybersecurity compliance metrics to measure program effectiveness, control performance, and risk trends.</li><li>
Design and produce cybersecurity dashboards and reports using Power BI, Excel, and related tools, translating complex compliance and risk data into clear, actionable visualizations for technical and non-technical audiences.</li><li>
Support continuous process improvement by identifying opportunities to streamline compliance tracking, reporting, and documentation within a dynamic software development environment.</li></ul>
Requirements:
<ul><li>Bachelor&rsquo;s degree in Cybersecurity, Information Systems, Computer Science, or a related field; equivalent relevant experience may be considered in lieu of a degree.</li><li>
Minimum of 8 years of experience in cybersecurity compliance, with demonstrated experience supporting U.S. Government contracting and software development environments.</li><li>
Strong working knowledge of U.S. Government cybersecurity regulations and standards, including NIST, FISMA, FedRAMP, DFARS, and related frameworks.</li><li>
Experience supporting security audits, assessments, or compliance reviews within federal or government-regulated environments.</li><li>
Proven ability to analyze compliance and security data and translate findings into meaningful metrics, reports, and recommendations.</li><li>
Proficiency in Excel (data analysis, pivot tables, charts) and experience designing Power BI dashboards or similar data visualization solutions.</li><li>
Excellent written and verbal communication skills, with the ability to clearly explain cybersecurity risks, compliance requirements, and trends to diverse stakeholders.</li><li>
Detail-oriented and proactive mindset with a strong focus on accuracy, documentation quality, and continuous improvement.</li></ul><p><b>
Desired Qualifications:</b></p><ul><li>
Cybersecurity certifications such as CISSP, CISM, or equivalent.</li><li>
Experience with Department of State FAM/FAH, including integration of requirements into system documentation, processes, and compliance artifacts.</li><li>
Prior experience developing or maintaining executive-level or program-level cybersecurity dashboards.</li><li>
Familiarity with SDLC-related compliance artifacts (SSP, POA&amp;M, RA, CMF documentation, etc.).</li></ul><p><b>
Clearance Requirement</b>: Active Secret clearance required.</p><p><br>
The salary range for this position depends upon multiple factors including location, the individual's knowledge, skills, competencies, and experience, and contract-specific budget constraints and organizational requirements.<br>
Gunnison Consulting Group's total compensation package also includes bonus and profit-sharing opportunities, depending on company and employee performance. Available employee benefits include:</p><ul><li>
3 weeks of Personal Leave your first year</li><li>
11 paid Holidays each year</li><li>
5 days of Flexible Time Off each year</li><li>
401(k) company match at 50% up to 10% of your salary</li><li>
Medical, Dental and Vision Insurance</li><li>
Life and Disability Insurance</li><li>
Public Transportation Subsidies</li><li>
Certifications and Training Allowance - $2,500/year!</li></ul><p><b>
Why Join Gunnison?</b></p><ul><li>
Gunnison takes on ambitious projects. We target fun, challenging work that requires creative thinking and innovation.</li><li>
Quality is our top priority.</li><li>
Gunnison employee benefits meet or exceed what other companies in the Washington, D.C. metropolitan area offer.</li><li>
There is a great sense of camaraderie at Gunnison. This is an atmosphere we will maintain as we continue to grow.</li><li>
We are growing rapidly and the opportunity for individual professional growth with Gunnison is outstanding.</li><li>
We hire for careers at Gunnison, not to fill a position.</li></ul><p>
Equal Opportunity/Affirmative Action Employer. Must be eligible for employment in the United States. We are unable to sponsor candidates at this time.<br>
In 1994 Gunnison began serving the greater Washington, D.C. metro area, focused on tackling our customers' most ambitious technology projects<b>.</b> <b><i>By creating a culture dedicated to enabling our customers and employees to achieve more than they ever thought they could</i></b><b>,</b> the company has thrived for over 25 years.</p></div>

Cybersecurity Compliance SME

Arete Consulting LLC

<p><b>Overview:</b><br/>Arete Consulting is seeking a highly skilled Senior Cybersecurity Analyst to support the U.S. Coast Guard&rsquo;s Robotics and Autonomous Systems Program Executive Office (RAS PEO). This position focuses on cybersecurity compliance and lifecycle support for Unmanned Aircraft Systems (UAS) under the Risk Management Framework (RMF).</p><p><b>Duties:</b></p><ul><li>Develop and maintain RMF documentation to support acquisition lifecycle phases and Acquisition Decision Events (ADEs) across the RAS PEO. Prepare and maintain RMF documentation to support acquisition lifecycle phases and Acquisition Decision Events (ADEs).</li><li>Track and manage and validate Plan of Action and Milestones (POAMs) in eMASS, ensuring timely risk remediation and accurate reporting.</li><li>Oversee security control assessments, interpret scan results, and ensure transparency and traceability throughout the testing lifecycle.</li><li>Lead the preparation and submission of Authority to Operate (ATO) and Authority to Connect (ATC) packages; coordinate responses with CG-TECH, CGCYBER, ISSOs, and program stakeholders.</li><li>Support cybersecurity engineering and configuration management activities to ensure systems meet baseline and ongoing compliance requirements.</li><li>Provide lifecycle cybersecurity support from system inception through deployment, sustainment, and decommissioning.</li><li>Facilitate coordination between government program offices, cybersecurity service providers (CSSPs), and external partners to maintain accreditation and operational readiness.</li><li>Provide subject matter expertise on cybersecurity and risk posture, emerging threats, and mitigation strategies to inform program leadership decision-making.</li></ul><p><b>Qualifications:</b></p><ul><li>Active Top Secret Clearance required upon hire.</li><li>Demonstrated experience with the Risk Management Framework (RMF), including development of security authorization artifacts across RMF Steps 0-6.</li><li>Proficiency with eMASS for control inheritance, POA&amp;M management, and accreditation package development.</li><li>Hands-on experience supporting cybersecurity lifecycle management and configuration compliance for federal information systems.</li><li>Strong understanding of federal cybersecurity policies, including NIST 800-53, 800-37, and agency-level governance (e.g., DOD/CGCYBER directives).</li><li>Ability to work effectively within classified environments and collaborate with diverse government and contractor stakeholders.</li></ul><p><b>Preferred:</b></p><ul><li>Experience supporting acquisition programs, ATO/ATC processes, or cybersecurity integration for autonomous or aviation-relation systems.</li><li>Security certifications are a plus but not required.</li></ul><p>Pay: $110,000.00 - $135,000.00 per year</p><p>Benefits:</p><ul><li>401(k)</li><li>401(k) matching</li><li>Dental insurance</li><li>Health insurance</li><li>Life insurance</li><li>Paid time off</li><li>Professional development assistance</li><li>Referral program</li><li>Tuition reimbursement</li><li>Vision insurance</li></ul><p>Work Location: In person</p>

Senior Cybersecurity Analyst

Quzara LLC

<div><p><b>Job Title: </b>Cybersecurity Solutions Architect (CSA)</p><p><b>
Pay Type</b>: SALARIED EXEMPT</p><p><b>
Location: </b>Hybrid, Washington, DC (Must Work East Coast Hours, United States)</p><p><b>
Citizenship: </b>U.S. Citizenship (Required)</p><p><b>
Summary of Position Role/Responsibilities</b></p><p>
The Cybersecurity Solutions Architect (CSA) acts as the technical authority for designing, validating, and overseeing comprehensive cybersecurity solutions across Quzara&rsquo;s federal and enterprise environments. This role ensures alignment with Zero Trust principles, enterprise standards, and mission-specific requirements, while translating complex security and operational needs into scalable, resilient, and compliant technical architectures for cloud and hybrid settings. Additionally, the CSA advises leadership on architectural risks, technology tradeoffs, and long-term technical direction to support the secure delivery of solutions under the Technology Support Services (TSS) framework.</p><p><b>
Essential Functions of the Job</b></p><div><ul><li>
Design and validate end-to-end cybersecurity solution architectures across cloud, hybrid, and enterprise environments.</li><li>
Translate security, compliance, and mission requirements into implementable technical designs and architectural blueprints.</li><li>
Review and approve security architectures, system diagrams, and integration patterns to ensure consistency and compliance with standards.</li><li>
Ensure alignment of all solutions with Zero Trust architecture principles, SecOps tooling, and enterprise security frameworks.</li><li>
Identify architectural risks, gaps, and constraints, and provide actionable mitigation strategies.</li><li>
Provide technical oversight and governance during solution implementation, ensuring adherence to approved architectures.</li><li>
Establish architecture patterns and implementation approaches that support scalability, resilience, high availability, and business continuity.</li><li>
Oversee and guide technical change management processes impacting system architecture and integrations.</li><li>
Advise executive leadership and stakeholders on technical direction, risk posture, and tradeoffs associated with cybersecurity solutions.</li><li>
Support technology selection, vendor evaluations, and solution design decisions from an architectural and security perspective.</li></ul></div><p><b>
Marginal Functions of the Job</b></p><div><ul><li>
Other duties as assigned</li></ul></div><p><b>
Normal Work Schedule</b>:</p><p>
This full-time role runs Monday to Friday, 8:30 AM&ndash;5:30 PM and requires flexibility to work remotely or on-site (if applicable per client RTO policies). On occasion additional hours may be necessary.</p><p><b>
Education, Training, and Experience</b></p><div><ul><li>
Bachelor&rsquo;s degree in Cybersecurity, Computer Science, Information Technology, or a related field.</li><li>
8+ years of experience in cybersecurity, with a strong focus on solution architecture, system design, and security engineering.</li><li>
Demonstrated experience designing and implementing enterprise security architectures in cloud and hybrid environments.</li><li>
Strong understanding of Zero Trust architecture, security frameworks, and enterprise security design principles.</li><li>
Experience translating business and mission requirements into technical architecture solutions.</li><li>
Proven ability to lead architectural reviews and provide technical governance across multiple projects.</li><li>
Experience advising senior leadership on security risks, tradeoffs, and technical strategy.</li><li>
Familiarity with federal and regulatory frameworks such as NIST SP 800-53, FedRAMP, and related compliance standards is preferred.</li><li>
Strong communication skills with the ability to present complex architectural concepts to both technical and executive audiences.</li><li>
Must be a U.S. Citizen and eligible to support federal contracting environments.</li></ul></div><p><b>
Preferred Certifications</b></p><div><ul><li>
CISSP (Certified Information Systems Security Professional)</li><li>
AWS Certified Solutions Architect or Microsoft Certified: Azure Solutions Architect Expert (AZ-305)</li><li>
Certified Cloud Security Professional (CCSP) or equivalent</li><li>
Additional enterprise architecture or security certifications are also a plus</li></ul></div><p><b>
EEO Statement</b></p><p>
The Company is an Equal Employment Opportunity (EEO) employer and does not discriminate based on race, color, religion, sex, sexual orientation, national origin, age, marital status, disability, veteran's status, or any other basis protected by applicable discrimination laws.</p></div>

Cybersecurity Solutions Architect

MCN Build

<div><div><div><div><div><b>GENESYS IMPACT LLC</b></div><div><b>
JOB DESCRIPTION</b></div><div><i>
Cloud &amp; Security Analyst I</i></div></div></div><div><div><div><b><br>
Department</b></div><div>
IT Services</div></div><div><div><b><br>
Location</b></div><div>
Washington, DC (Hybrid)</div></div><div><div><b><br>
FLSA Status</b></div><div>
Exempt</div></div><div><div><b><br>
Clearance</b></div><div>
MBI Public Trust or Higher</div></div></div></div><div></div><div><b><br>
ABOUT GENESYS IMPACT</b></div><div></div><div><br>
Genesys Impact LLC is a Washington, DC-based technology integrator specializing in IT managed services, cybersecurity, structured cabling, audiovisual systems, and physical security solutions. We serve commercial and federal government clients across the DMV area, delivering end-to-end technology solutions from design through implementation and ongoing support.</div><div><b>
POSITION SUMMARY</b></div><div>
The Cloud &amp; Security Analyst I is a technical role responsible for supporting Microsoft 365 cloud administration, cybersecurity compliance, and security governance activities across Genesys Impact client environments. This position will work closely with senior engineers and project managers to deliver managed services engagements for federal and commercial clients, with a focus on M365 platform management, data loss prevention, and security compliance frameworks.</div><div></div><div><b><br>
KEY RESPONSIBILITIES</b></div><div><b>
Microsoft 365 &amp; SharePoint Administration</b></div><div><ul><li>
Administer SharePoint Online site collections, document libraries, permissions, and governance policies across client M365 tenants</li><li>
Design and implement Power Automate workflows to automate business processes, notifications, and compliance-driven escalations</li><li>
Develop Power Apps and integrate with Microsoft Purview for eDiscovery, content holds, and incident response workflows</li><li>
Configure and maintain OneDrive, Teams, and Exchange Online environments in alignment with client security requirements</li><li>
Consolidate and migrate SharePoint sites; redesign information architecture and establish governance frameworks</li></ul></div><div></div><div><b><br>
Security, Compliance &amp; Data Governance</b></div><div><ul><li>
Implement and manage Data Loss Prevention (DLP) policies across M365 services including Exchange Online, OneDrive, and Teams</li><li>
Design Sensitive Information Types (SITs) and Trainable Classifiers to protect FII, PII, and SBU data categories</li><li>
Perform Data at Rest (DAR), Data in Motion (DIM), and Data in Use (DIU) scanning to identify and remediate exposed sensitive data</li><li>
Support implementation of access controls, governance policies, and compliance measures across integrated M365 services</li><li>
Monitor and respond to DLP policy violations, coordinating with client stakeholders on remediation actions</li><li>
Leverage Microsoft Defender for Cloud Apps (MDCA) and Microsoft Defender for Endpoint (MDE) for threat visibility and response</li></ul></div><div></div><div><b><br>
Automation &amp; Development</b></div><div><ul><li>
Develop Python-based automation scripts leveraging Microsoft Graph API and Security API to streamline security workflows and incident reporting</li><li>
Build integrations between M365 services, Purview eDiscovery, and ticketing/reporting platforms to reduce manual operational overhead</li><li>
Document automation solutions and contribute to internal knowledge base and runbooks</li></ul></div><div></div><div><b><br>
Client Engagement &amp; Support</b></div><div><ul><li>
Provide Tier 2/3 support to client staff on Microsoft 365 suite functionality including SharePoint, Teams, and OneDrive best practices</li><li>
Assist in preparation of federal and commercial technical proposals with input on M365, cloud, and cybersecurity scope sections</li><li>
Participate in client-facing meetings, status updates, and deliverable reviews under the guidance of senior staff</li></ul></div><div><b>
REQUIRED QUALIFICATIONS</b></div><div><ul><li>
Bachelor's degree in Information Technology, Information Systems, Cybersecurity, or related field</li><li>
1&ndash;3 years of hands-on experience with SharePoint Online and the Microsoft 365 ecosystem</li><li>
Demonstrated experience with Power Automate workflow development</li><li>
Working knowledge of Microsoft Purview, DLP policies, and compliance frameworks</li><li>
Familiarity with Python scripting for automation and API integration (Microsoft Graph API a plus)</li><li>
MBI Public Trust clearance or ability to obtain one; higher clearances (Secret, TS) a plus</li><li>
Strong written and verbal communication skills with the ability to translate technical content for non-technical stakeholders</li></ul></div><div><b>
PREFERRED QUALIFICATIONS</b></div><div><ul><li>
M.S. in Information Systems, Cybersecurity, or related discipline</li><li>
Experience supporting federal agency M365 tenants (IRS, DoD, DHA, or similar)</li><li>
Exposure to Microsoft Defender for Cloud Apps (MDCA), Microsoft Defender for Endpoint (MDE), or Splunk SIEM/SOAR</li><li>
Familiarity with Palo Alto Networks, Strata Cloud Manager (SCM), or Symantec Broadcom DLP</li><li>
Microsoft certifications (MS-900, SC-900, AZ-900, MS-500, AZ-500) or active pursuit thereof</li><li>
Experience contributing to federal or state technical proposals</li></ul></div><div><b>
COMPENSATION &amp; BENEFITS</b></div><div></div><div><div><div><b><br>
Salary Range</b></div><div><br>
$80,000 &ndash; $90,000 annually</div></div><div><div><b><br>
Health Benefits</b></div><div><br>
Medical, dental, and vision coverage</div></div><div><div><b><br>
Paid Time Off</b></div><div><br>
Competitive PTO and federal holiday schedule</div></div><div><div><b><br>
Professional Dev.</b></div><div><br>
Certification reimbursement and training support</div></div><div><div><b><br>
Work Arrangement</b></div><div><br>
Hybrid &mdash; Washington, DC metro area; client site travel as required</div></div></div><div></div><div><i><br>
Genesys Impact LLC is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability, or protected veteran status.</i></div></div>

Cloud & Security Analyst I - Washington D.C.

MANTECH

<div><p><b>MANTECH</b> seeks a motivated, career and customer-oriented <b>Configuration Manager</b> to join our team in <b>Washington, D.C.</b></p><p></p><p><b>
Responsibilities include, but are not limited to:</b></p><ul><li>
Develop and maintain configuration management (CM) plans, policies, and baselines to support system development and operational environments</li><li>
Manage the Security Assessment and Authorization (SAA) process, ensuring systems comply with approved security policies and are properly maintained and transitioned into GRC tools</li><li>
Define and recommend system security controls, impact levels, and authorization boundaries in coordination with system owners and Authorizing Officials</li><li>
Coordinate and facilitate interconnection agreements (ISAs, MOUs, MOAs) for systems integrating with external or joint-use environments</li><li>
Conduct independent reviews of System Security Plans (SSPs), determine testing requirements, and support security control validation efforts</li><li>
Lead security inspections, testing, and ATO package submissions, while advising leadership on vulnerabilities, residual risks, and compliance status</li><li>
Support change and configuration management processes, including tracking Requests for Change (RFCs), maintaining documentation, and delivering executive-level briefings and stakeholder communications</li></ul><p></p><p><b>
Minimum Qualifications:</b></p><ul><li>
A minimum of 10 years&rsquo; experience in a computer science or cybersecurity related field with a minimum of 7 years of experience serving as an ISSR or in a similar role at a cleared facility</li><li>
Must hold at least one of the following certifications: Certified Information Systems Security Professional (CISSP), Global Information Security Professional (GISP), or the CompTIA Advanced Security Practitioner (CASP), or Certified Information System Manager (CISM).</li><li>
Experience operating security tools such as Tenable Nessus/Security Center, IBM Guardium, HP WebInspect, NMAP, or similar technologies</li><li>
Strong knowledge of RMF and ATO/SAA processes, including NIST SP 800-53 and FISMA compliance requirements</li><li>
Hands-on experience with configuration management, system baselining, and change control processes</li><li>
Familiarity with GRC tools (e.g., eMASS, Xacta, Archer), including POA&amp;M tracking, and experience developing/reviewing SSPs and security controls</li></ul><p></p><p><b>
Preferred Qualifications:</b></p><ul><li>
Bachelor's or advanced degree in Computer Science, Cybersecurity, or other cyber discipline</li></ul><p></p><p><b>
Clearance Requirements:
</b></p><ul><li>Must have a current/active Top Secret security clearance and be willing and able to obtain SCI eligibility prior to starting this position.</li><li>
Must be willing to sit for a polygraph if required</li></ul><p></p><p><b>
Physical Requirements:</b></p><ul><li>
Must be able to remain in a stationary position 50%.</li><li>
Needs to occasionally move about inside the office to access file cabinets, office machinery, etc.</li><li>
Constantly operates a computer and other office productivity machinery, such as a calculator, copy machine and computer printer.</li><li>
Often positions self to maintain computers in the lab, including under the desks and in the server closet.</li><li>
Frequently communicates with co-workers, management and customers, which may involve delivering presentations. Must be able to exchange accurate information in these situations.</li></ul></div><p></p>

Configuration Manager

Anavation

<div><div><b>Be Challenged and Make a Difference</b></div>
<div></div>
<div>In a world of technology, people make the difference. We believe if we invest in great people, then great things will happen. At AnaVation, we provide unmatched value to our customers and employees through innovative solutions and an engaging culture.</div><div></div><div><p><b><br>
Description of Task to be Performed:</b></p>
<p>
AnaVation is seeking a senior-level Cybersecurity Program Manager (GRC) with an active Top Secret clearance. The ideal candidate will have Federal Program Management experience with teams of at least 20 cybersecurity personnel plus hands-on experience leading IT Security Audits and SA&amp;A activities. This is a full-time position located onsite with our customer in Washington DC.</p>
<p><b>
What you will be doing</b></p>
<ul>
<li>Fully accountable for planning, organizing, and executing all aspects of program scope, schedule, cost, technical, and staffing performance and activities on complex cybersecurity contracts to ensure exceptional service delivery</li>
<li>Manage subcontractors to ensure their strict adherence to AnaVation and client standards of quality and performance; provide a &ldquo;one team&rdquo; view to the client</li>
<li>Ensure timely, complete, high-quality contract deliverables; ensure SLOs are met or exceeded 100% of the time</li>
<li>Interface with client&rsquo;s senior management personnel, including briefings up to CIO/CISO level</li>
<li>Lead IT Security Audits including FISMA, FISCAM, IRS, and OIG</li>
<li>Leverages industry knowledge, best practices, lessons learned and stakeholder feedback to develop, implement and continuously improve GRC services</li>
<li>Optimize processes to maximize efficiencies within the team and program, including GRC automation and functional integration across task areas and teams</li>
<li>Be a positive change agent, both within and outside the organization; propagate our corporate culture throughout the program</li>
<li>Lead risk management activities, including identification and recommended mitigations; track and manage risks and issues through closure</li>
<li>Build, grow, and develop high-performing teams aligned with the client&rsquo;s mission and strategy</li>
<li>Manage program personnel to include interviewing, hiring, performance evaluations, compensation, and training and development</li>
<li>Guide and mentor subordinate managers, team leads, and staff</li>
<li>Work closely with the client to function as the single point of contact and accountability, ensuring that all technical work, communications, and decision-making remain aligned, timely, and defensible</li>
<li>Serve as Quality Control Manager ensuring all deliverables and assigned tasks meet QASP requirements</li>
<li>Must have the ability to work in a dynamic environment and adapt to changing conditions</li>
<li>Must possess a high degree of originality, creativity, and initiative requiring minimal supervision</li>
</ul></div><h3 class="jobSectionHeader"><b>Required Qualifications:</b></h3><div>
<p><b>
Minimum Qualifications (Education/Certications, Experience, etc):</b></p>
<ul>
<li>Active PMP, CISSP, and CISM certifications</li>
<li>Bachelor&rsquo;s Degree in IT, Cybersecurity, Business, or related</li>
<li>15+ years managing GRC-centric cybersecurity programs with at least 25 people</li>
<li>5+ years leading IT security audits including FISMA, FISCAM, IRS, OIG, etc</li>
<li>1+ years leading FISMA metrics reporting</li>
<li>1+ years leading cybersecurity shared services (e.g., SOC-aaS, GRC-aaS)</li>
</ul>
<p><b>Clearance:</b></p>
<ul>
<li>Active Top Secret clearance</li>
</ul>
<p><b>Other Required Skills &amp; Qualifications:</b></p>
<ul>
<li>Experience with IT Security Assessment &amp; Authorization (SA&amp;A) processes and documentation sufficient to mentor and advise team members</li>
<li>Experience with GRC tools such as vulnerability management, vulnerability scanning, endpoint management, data protection, SIEM, and GRC automation platforms</li>
<li>Expert-level command of the English language (oral and written), with experience interacting effectively at the CIO and CISO levels of large organizations</li>
<li>Expert-level organizational skills and ability to keep a multitude of tasks and projects on track at all times and with minimal supervision</li>
</ul></div><h3 class="jobSectionHeader"><b>Preferred Qualifications:</b></h3><ul>
<li>Prior experience as an ISSO/ISSM/ISSE or SCA</li>
</ul><div><b>Benefits</b></div>
<ul> <li>Generous cost sharing for medical insurance for the employee and dependents</li>
<li> 100% company paid dental insurance for employees and dependents</li>
<li> 100% company paid long-term and short-term disability insurance</li>
<li> 100% company paid vision insurance for employees and dependents</li>
<li> 401k plan with generous match and 100% immediate vesting</li>
<li> Competitive Pay</li>
<li> Generous paid leave and holiday package</li>
<li> Tuition and training reimbursement</li>
<li> Life and AD&amp;D Insurance</li>
</ul><div><b>About AnaVation</b></div>
<div>AnaVation is the leader in solving the most complex technical challenges for collection and processing in the U.S. Federal Intelligence Community. We are a US owned company headquartered in Chantilly, Virginia. We deliver groundbreaking research with advanced software and systems engineering that provides an information advantage to contribute to the mission and operational success of our customers. We offer complex challenges, a top-notch work environment, and a world-class, collaborative team.</div>
<div></div>
<div>If you want to grow your career and make a difference while doing it, AnaVation is the perfect fit for you!</div>
<div></div>
<div>AnaVation is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to sex, race, color, religion, national origin, disability, protected Veteran status, age, or any other characteristic protected by law.</div></div>

Cybersecurity Program Manager (GRC)

<div><div><b>Be Challenged and Make a Difference</b></div>
<div></div>
<div>In a world of technology, people make the difference. We believe if we invest in great people, then great things will happen. At AnaVation, we provide unmatched value to our customers and employees through innovative solutions and an engaging culture.</div><div></div><div><p><b><br>
Description of Task to be Performed:</b></p>
<p>
AnaVation is seeking a Customer Success Program Manager to support a cabinet-level client in Washington DC. The selected individual will oversee all aspects of delivering GRC services to interdepartmental and external Federal agencies in an -aaS model. Exceptional interpersonal and communication skills are required.</p>
<p><b>
What you will be doing</b></p>
<ul>
<li>Independently manage the entire portfolio of GRC Shared Services being delivered on behalf of the client to interdepartmental and external Federal agencies, including administration, governance, growth and adoption, financial management, cost models, service delivery, continuous improvement, and the service portfolio itself.</li>
<li>Maintain and mature the existing portfolio of GRC service offerings; recommend, develop, and sell new GRC services including pipeline, marketing, capability briefings, and technical and price proposals for prospective new end customers.</li>
<li>Provide Shared Services subject matter expertise including recommending program strategy and guidelines, leading operational improvements, and ensuring exceptional customer relationship management.</li>
<li>Provide GRC subject matter expertise to interpret technical requirements, brief program and client leadership, and resolve technical issues with stakeholders.</li>
<li>Lead quality management of shared services work products and deliverables, establish processes and monitor to ensure end customer SLAs are met, and support share services program audits.</li>
<li>Perform capacity planning to ensure current and future resource needs are met.</li>
<li>Negotiate resource utilization within and between teams providing technical shared services support.</li>
<li>Establish processes and support on- and offboarding of new shared services customers to ensure exceptional customer experience and the highest levels of satisfaction.</li>
<li>Recommend and complete special projects to continuously mature the program and its underlying elements.</li>
</ul></div><h3 class="jobSectionHeader"><b>Required Qualifications:</b></h3><p><b>
Minimum Qualifications (Education/Certifications, Experience, etc):</b></p>
<ul>
<li>Minimum one (1) managing cybersecurity service delivery in an -aaS model (e.g., SOCaaS, GRCaaS)</li>
<li>Minimum ten (10) years of hands-on GRC experience, e.g., as an ISSO/ISSE/ISSM, SCA.</li>
<li>At least two (2) active, high-level program management and/or cybersecurity certifications such as PMP, CISSP, CISM, CEH, CASP, CCSP, CCSK, or Security+.</li>
<li>Minimum two (2) years of hands-on experience with JCAM</li>
<li>Bachelors Degree in a related field, or four (4) additional years of related experience</li>
</ul>
<p><b>Clearance:</b></p>
<ul>
<li>Minimum Active Top Secret clearance with SCI eligibilit</li>
</ul>
<p><b>Other Required Skills &amp; Qualifications:</b></p>
<ul>
<li>Intimate familiarity with FISMA, NIST 800-53, RMF, FedRAMP, SA&amp;A, IT security audits, vulnerability and POA&amp;M remediation, executive orders and directives, BODs, and OMB cyber memoranda</li>
<li>Exceptional interpersonal skills to establish and maintain positive working relationships with all stakeholders</li>
<li>Expert-level command of the English language (oral and written), with experience interacting effectively at the CIO and CISO levels of large organizations</li>
<li>Expert-level organizational skills and ability to keep a multitude of tasks and projects on track at all times and with minimal supervision</li>
<li>Experience with cybersecurity tools such as vulnerability management, vulnerability scanning, endpoint management, data protection, SIEM, and GRC automation platforms</li>
</ul>
<p><b>Location:</b></p>
<ul>
<li>This position is currently performed remotely but the work location is subject to change at the customer&rsquo;s sole discretion. Candidates must be located in the DC-metro area and be willing to adapt to a hybrid or on site work location in Washington DC if required.</li>
</ul><h3 class="jobSectionHeader"><b>Preferred Qualifications:</b></h3><div>
<ul><li>Masters degree or higher in cybersecurity, information assurance, or related</li>
<li>Additional advanced cybersecurity-related certifications</li>
<li>Cybersecurity consulting experience is a plus</li>
</ul></div><div><b>Benefits</b></div>
<ul> <li>Generous cost sharing for medical insurance for the employee and dependents</li>
<li> 100% company paid dental insurance for employees and dependents</li>
<li> 100% company paid long-term and short-term disability insurance</li>
<li> 100% company paid vision insurance for employees and dependents</li>
<li> 401k plan with generous match and 100% immediate vesting</li>
<li> Competitive Pay</li>
<li> Generous paid leave and holiday package</li>
<li> Tuition and training reimbursement</li>
<li> Life and AD&amp;D Insurance</li>
</ul><div><b>About AnaVation</b></div>
<div>AnaVation is the leader in solving the most complex technical challenges for collection and processing in the U.S. Federal Intelligence Community. We are a US owned company headquartered in Chantilly, Virginia. We deliver groundbreaking research with advanced software and systems engineering that provides an information advantage to contribute to the mission and operational success of our customers. We offer complex challenges, a top-notch work environment, and a world-class, collaborative team.</div>
<div></div>
<div>If you want to grow your career and make a difference while doing it, AnaVation is the perfect fit for you!</div>
<div></div>
<div>AnaVation is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to sex, race, color, religion, national origin, disability, protected Veteran status, age, or any other characteristic protected by law.</div></div>

Customer Success Program Manager – ISSO Services

Explore 83+ Cybersecurity compliance sme in Washington this April. Find roles across top companies and apply now to boost your career.