cybersecurity manager

RATP Dev

<div><h2 class="jobSectionHeader"><b>Cybersecurity Manager</b></h2>
<div><ul><li><div>Fixed-term contract</div>
</li>
<li><div>Full-time</div>
</li>
<li><div>At least 10 years of experience (Professional)</div>
</li>
<li><div>Bachelor degree</div>
</li>
<li><div>Cyber Security Manager/Expert</div></li></ul></div></div>
<br><div><div><div><div><h2 class="jobSectionHeader"><b>Mission
</b></h2><p></p><div><p><b>JOB PURPOSE:</b></p><p>
The Cybersecurity Manager is responsible for the strategic design, implementation, and continuous maturation of the company&rsquo;s cybersecurity posture across all business units. This role oversees local security operations, leads the in-house Security Operations Center (SOC), ensuring compliance with ISO 27001 certification and ensuring alignment with recognized security frameworks (NIST CSF). By leading Governance, Risk, and Compliance (GRC) initiatives and fostering cross-functional partnerships with IT and Digital teams, the Manager ensures the resilience of the organization&rsquo;s digital ecosystem against emerging threats.</p></div></div><p></p><div><br>
<h2 class="jobSectionHeader"><b>Profile
</b></h2><p></p><div><p><b>RESPONSIBILITIES/DUTIES</b></p><p><b>
Cybersecurity Governance &amp; Strategy</b></p><ul><li> Develop and execute the company-wide cybersecurity strategy in alignment with organizational objectives.</li><li> Design, maintain, and enforce a robust suite of security policies, standards, and procedures based on ISO 27001 and NIST CSF to ensure operational consistency.</li><li> Drive the end-to-end ISO 27001 certification lifecycle, including initial gap analysis, control implementation, and final readiness audits.</li><li> Establish a high-maturity GRC ecosystem to centralize risk management, regulatory compliance, and corporate security governance.</li></ul><p><b>
Security Operations &amp; SOC Management</b></p><ul><li> Provide strategic direction and technical mentorship to the SOC team, fostering a culture of continuous learning and incident excellence.</li><li> Standardize SOC workflows&mdash;including SIEM tuning, threat hunting, alert triage, and incident response&mdash;to meet or exceed industry benchmarks.</li><li> Develop and present high-level SOC performance metrics, and KPI dashboards to senior management and relevant stakeholders.</li></ul><p><b>
Technical Security Oversight</b></p><ul><li> Direct the deployment and lifecycle management of advanced security solutions, including Firewalls, EDR/XDR, IDS/IPS, IAM, and Endpoint Protection.</li><li> Coordinate comprehensive vulnerability scans, penetration tests, ensuring prioritized remediation based on business impact.</li><li> Mandate and audit secure configuration standards and &quot;Security by Design&quot; principles across cloud infrastructure, and business applications.</li></ul><p><b>
Cybersecurity Risk Management</b></p><ul><li> Lead enterprise-level cybersecurity risk assessments to identify, evaluate, and mitigate potential threats, maintaining a dynamic and actionable Risk Register.</li><li> Define and oversee the security vetting process for vendors and third-party partners.</li></ul><p><b>
Awareness, Training &amp; Culture</b></p><ul><li> Champion a security-first culture through the design and delivery of a comprehensive cybersecurity awareness program.</li><li> Manage phishing simulations and targeted training campaigns to reduce the organization&rsquo;s human-risk surface.</li></ul><p><b>
Compliance, Audit &amp; Reporting</b></p><ul><li> Act as the primary liaison for internal and external auditors, ensuring the integrity of evidence for ISO 27001 and regulatory audits.</li><li> Continuously monitor the legal and regulatory landscape to ensure organizational compliance with data protection and cybersecurity mandates.</li></ul><p><b>
Safety Responsibilities</b></p><ul><li> Promote a positive safety culture within the workplace and attend any safety-related meetings or briefings as required within the job role.</li><li> Comply with the requirements of RDMC RQHSE Policy and Safety Management System.</li><li> Be mindful that Safety, Security, and Environmental protection are everyone&rsquo;s responsibility. All staff members are accountable for reporting and intervening in any Safety, Security, or Environmental violations.</li></ul><p><b>
ESSENTIAL QUALIFICATIONS, KNOWLEDGE &amp; EXPERIENCE</b></p><p><b>
QUALIFICATIONS:</b></p><ul><li> Bachelor&rsquo;s degree in Computer Science, Business Information Systems, Information Security or a related field (required).</li><li> CISSP, CISM, or CISA certifications are preferred.</li><li> ISO 27001 Lead Implementer or Lead Auditor is preferred.</li><li> ITIL Foundation is a plus.</li><li> Fluent in English and Arabic, French is a plus.</li></ul><p><b>
KNOWLEDGE:</b></p><ul><li> Advanced understanding of network security, cloud security, cryptography, and application security.</li><li> Strong knowledge of ISO 27001, NIST Cybersecurity Framework, and GRC practices.</li></ul><p><b>
EXPERIENCE:</b></p><ul><li> 10+ years of experience in Cybersecurity roles, with at least 3 years in team leadership.</li><li> Proven experience managing SOC operations and security engineering team.</li><li> Strong track record of cross-functional collaboration and stakeholder engagement.</li></ul><p><b>
DESIRED BEHAVIORS &amp; EXPERIENCES</b></p><ul><li> <b>Influence &amp; Engagement:</b> Builds strong relationships and effectively engages with cross-functional stakeholders to achieve alignment and buy-in.</li><li> <b>Analytical Thinking: </b>Evaluates complex problems, interprets data effectively, and makes sound decisions based on insights.</li><li> <b>Execution Excellence:</b> Delivers high-quality outcomes on time, manages multiple priorities, and ensures effective follow-through.</li><li> <b>Change Agility:</b> Adapts quickly to evolving needs, leads change with confidence, and helps others navigate transitions smoothly.</li><li> <b>Communication:</b> Expresses ideas clearly and professionally, prepares impactful documentation, and engages effectively with diverse audiences.</li><li> <b>Collaboration: </b>Promotes teamwork, shares knowledge openly, and supports others to achieve common goals.</li><li> <b>Attention to Detail:</b> Maintains accuracy and consistency in documentation, reporting, and system configurations.</li><li> <b>Accountability:</b> Demonstrates ownership, responsibility, and reliability in delivering on objectives.</li><li> <b>Resilience:</b> Remains composed under pressure, solves problems calmly, and stays focused on long-term results.</li></ul></div></div></div></div><br>
<p></p>
<div><div><div><h3 class="jobSectionHeader"><b>Location</b></h3>
<p></p><div><div><div><b>Location</b></div></div><b>
</b><div><b>Address</b></div><b>
</b></div><p>Cairo, Cairo, Egypt</p></div></div></div></div><div></div>

Cybersecurity Manager

PingWind Inc.

<div><div><p><b>Location:</b> Alexandria, Va<br>
<b>Required Clearance: </b>Top Secret Clearance<br>
<b>Certifications:</b> N/A<br>
<b>Required Education: </b>BS/BA degree<br>
<b>Required Experience:</b> 12 years relevant experience (an additional 4 years experience may be substituted in lieu of degree).</p><p><br>
<b>
Position Description:</b></p>
<p>
PingWind is seeking a Cloud Cybersecurity Manager responsible for leading and overseeing cloud cybersecurity strategy, compliance, and operations for MODES III, ensuring secure, resilient, and fully compliant IT, cybersecurity, and data operations in support of MC&amp;FP mission requirements.</p>
<p><b>
Responsibilities:</b></p>
<ul><li>Leads cloud cybersecurity management activities supporting IT, Cybersecurity, and Data Operations services in AWS GovCloud environments.</li><li>Oversees implementation and continuous monitoring of cybersecurity controls to ensure compliance with DoD, DISA, NIST Risk Management Framework (RMF), Zero Trust Architecture (ZTA), and MC&amp;FP security directives.</li><li>Directs system security engineering, authorization, and risk management activities, including ATO support, security assessments, continuous monitoring, and compliance reporting.</li><li>Provides governance and oversight of vulnerability management, configuration management, security incident response, and corrective action planning across cloud-hosted systems.</li><li>Integrates cybersecurity requirements into cloud architectures, DevSecOps pipelines, and operational processes in coordination with IT operations and engineering teams.</li><li>Leads cybersecurity status reporting and executive briefings, communicating security posture, risks, mitigation strategies, and compliance status to Government stakeholders.</li><li>Ensures cybersecurity practices align with requirements for Key Personnel as defined in H.3.5, including demonstrated senior-level experience managing cloud security programs for DoD or Federal environments.</li><li>Maintains and applies required professional cybersecurity certifications consistent with H.3.5 expectations, such as CISSP or equivalent senior-level cybersecurity certification, and cloud security credentials relevant to AWS GovCloud environments.</li><li>Mentors and guides cybersecurity and cloud engineering staff, enforcing consistent application of security standards, policies, and best practices across the program.</li></ul>
<p><b>
Required Qualifications</b></p>
<ul><li>Must hold or be able to obtain Top Secret Clearance</li></ul>
<p><b>
Desired Qualifications</b></p>
<ul><li>Master&rsquo;s Degree</li></ul>
<div><b>
About PingWind</b></div>
<div></div>
<div>PingWind is focused on delivering outstanding services to the federal government. We have extensive experience in the fields of cybersecurity, development, IT infrastructure, supply chain management and other professional services such as system design and continuous improvement. PingWind is an SBA certified Service-Disabled Veteran-Owned Small Business (SDVOSB) with offices in Northern Virginia and Huntsville AL.</div>
<div>www.PingWind.com</div>
<div></div>
<div><b>Our benefits include:</b></div>
<div></div>
<ul><li>Eleven Federal Holidays</li></ul>
<ul><li>Paid Time Off accrued each pay period</li></ul>
<ul><li>Parental Leave</li></ul>
<ul><li>Three medical plan choices with generous employer contribution</li></ul>
<ul><li>Dental and Vision Insurance</li></ul>
<ul><li>Company paid Short-Term and Long-Term Disability</li></ul>
<ul><li>Company paid Life and AD&amp;D Insurance</li></ul>
<ul><li>401k with competitive matching and vesting schedule</li></ul>
<ul><li>Continuing education assistance</li></ul>
<ul><li>Short Term / Long Term Disability &amp; Life Insurance</li></ul>
<ul><li>Medical, Dependent Care and Commuter Flexible Spending Accounts</li></ul>
<ul><li>Employee Assistance Program</li></ul>
<ul><li>Wellness benefits include Calm Health app and WellHub gym subsidy (formerly GymPass)</li></ul>
<ul><li>529 College Savings Plan</li></ul>
<ul><li>Legal Insurance</li></ul>
<ul><li>Pet Insurance</li></ul>
<div></div>
<div>Veterans are encouraged to apply</div>
<div></div>
<div>PingWind, Inc. does not discriminate in employment opportunities, terms, and conditions of employment, or practices on the basis of race, age, gender, religious or political beliefs, national origin or heritage, disability, sexual orientation, or any characteristic protected by law.</div><br>
<p></p>
</div>
<p>We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.</p></div>

Cloud Cybersecurity Manager

Parsons

<div>In a world of possibilities, pursue one with endless opportunities. Imagine Next!<br>
<p></p>
At Parsons, you can imagine a career where you thrive, work with exceptional people, and be yourself. Guided by our leadership vision of valuing people, embracing agility, and fostering growth, we cultivate an innovative culture that empowers you to achieve your full potential. Unleash your talent and redefine what&rsquo;s possible.<p></p><p><b><br>
Job Description:</b></p><p>
Parsons is looking for an amazingly talented <b>Lead Cybersecurity Manager</b> to join our team! In this role you will get to serve as the main POC for providing additional and direct support to the customer for all Cybersecurity functions</p><p></p><p><b>
What You'll Be Doing:</b></p><ul><li>
Will coordinate with the customers Information System Security Managers (ISSMs) and ensure compliance with security controls, and all pertinent DoD IT policy and procedures for all system integrations.</li><li>
Shall ensure data, information, and security systems are secure and function as required to prevent Cybersecurity breaches of all information systems.</li><li>
Provide a leadership role for all internal and external organizations to provide clear communication and direction for maximum Cybersecurity efforts.</li><li>
Lead the initiative for security best practices and provide recommendations to the Government.</li><li>
Will provide detailed understanding of the latest DoDI and RMF policies.</li></ul><p></p><p><b>
What Required Skills You'll Bring:</b></p><ul><li>
BS in Cybersecurity or Computer Science or Information Technology</li><li>
10+ years total experience.</li><li>
Minimum of 5 years' experience (within the last seven years) in the field of DoD Information Systems Security and/or Cybersecurity.</li><li>
Minimum of 5 years&rsquo; experience (within the last seven years) creating RMF packages and entering the data into eMASS to obtain an ATO/Authority to Connect, including all the ancillary artifacts.</li><li>
Minimum of 1 year experience working U.S. Army RMF processes</li><li>
Possess a current certification demonstrating knowledge of cybersecurity management (CAP, CompTIA Advanced Security Practitioner (CASP), GIAC Security Leadership (GSLC) (GLSC), Certified Information Systems Security Manager (CISSM), or Certified Information Systems Security Professional (CISSP).</li><li>
Possess and maintain a current/active Secret security clearance</li></ul><p><b><br>
What Desired Skills You'll Bring:</b></p><ul><li><p>
Experience as an ISSM, Information Systems Security Engineer (ISSE), and/or Information Systems Security Officer (ISSO).</p></li><li><p>
Experience in coordinating and conducting validation of security control implementation.</p></li><li><p>
5 years&rsquo; experience maintaining and managing client interface at the senior levels of the client organization.</p></li><li><p>
Possess a relevant industry certification and demonstrated success deploying technical IT solutions that include fiber infrastructure and/or wireless 5G in a diverse, distributed environment with multiple geographically dispersed sites.</p></li></ul><p></p><p><b>
Security Clearance Requirement:</b></p>
An active Secret security clearance is required for this position.
<p></p>This position is part of our Federal Solutions team.<p></p>
The Federal Solutions segment delivers resources to our US government customers that ensure the success of missions around the globe. Our intelligent employees drive the state of the art as they provide services and solutions in the areas of defense, security, intelligence, infrastructure, and environmental. We promote a culture of excellence and close-knit teams that take pride in delivering, protecting, and sustaining our nation's most critical assets, from Earth to cyberspace. Throughout the company, our people are anticipating what&rsquo;s next to deliver the solutions our customers need now.<p></p>
Salary Range: $71.30 - $128.32<p></p>
We value our employees and want our employees to take care of their overall wellbeing, which is why we offer best-in-class benefits such as medical, dental, vision, paid time off, 401(k), life insurance, flexible work schedules, and holidays to fit your busy lifestyle!<p></p>
This position will be posted for a minimum of 3 days and will continue to be posted for an average of 30 days until a qualified applicant is selected or the position has been cancelled.<p></p>
Parsons is an equal opportunity employer, and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability, veteran status or any other protected status.<p></p>
We truly invest and care about our employee&rsquo;s wellbeing and provide endless growth opportunities as the sky is the limit, so aim for the stars! Imagine next and join the Parsons quest&mdash;APPLY TODAY!<p></p><div>
Parsons is aware of fraudulent recruitment practices. To learn more about recruitment fraud and how to report it, please refer to https://www.parsons.com/fraudulent-recruitment/.</div></div>
<br><div><div><div>COMPETITIVE BENEFIT OFFERINGS</div></div><div><div><div><br>
Financial Wellness</div><div><br>
We care about your financial wellbeing. Parsons offers competitive pay and retirement plans to help you build wealth for the future while giving you the flexibility to diversify your investments.</div></div><div><div>
Work Life Harmony</div><div><br>
Balance in life is important and time away from the office is imperative to allow you to refresh and focus your attention on the things that matter to you. Parsons supports your time away by providing paid time off and paid flexible holidays.</div></div><div><div>
Career Development</div><div><br>
We are committed to fostering the personal and professional growth of our employees. Develop and advance yourself though our comprehensive training, educational and mentorship programs.</div></div><div><div><br>
Veteran Support</div><div><br>
We provide Industry leading benefits to support veterans and active-duty members to provide security for you and your family by offering robust leave and benefits; including paid active-duty military leave and paid time off when transitioning back to civilian life.</div></div><div><div>
Mind &amp; Body</div><div><br>
At Parsons we inspire healthier habits, heathier minds, and a healthier you through our wellness program. Participate in our weekly Meditation Mondays and Wellness Wednesdays. Wellness, at Parsons, is more than just your annual checkup.</div></div><div><div>
Health</div><div><br>
Health is not a one size fits all. At Parsons, we offer a robust Employee Assistance Program as well as comprehensive medical, dental and vision plans through large, national carriers with the choice of regional PPO, HDHP, or HMO networks.</div></div></div></div><p></p>

Lead Cybersecurity Manager

The Home Depot

<div><p><b>Position Purpose:</b></p><p>
The SaaS Security Manager is responsible for leading a team that continuously assesses and improves the security posture of The Home Depot&rsquo;s SaaS applications across the enterprise. This role owns the SaaS Security program, establishes standards and guardrails for SaaS platforms, and partners with product, engineering, and enterprise teams to protect customer, associate, and company data in third-party cloud services.</p><p><b><br>
Key Responsibilities:</b></p><ul><li>
100% Deliver Execution, Plans &amp; Aligns, Develop Others - Collaborate across teams to reduce vulnerabilities, risks, and incident management; Drive execution of solution delivery; Guide teams in strategy, alignment, analysis, and execution to ensure priorities, objectives/deliverables are met; Provide leadership, mentoring, and coaching to direct reports</li></ul><p><b><br>
Direct Manager/Direct Reports:</b></p><ul><li>
This position typically reports to Sr. Manager or Director</li><li>
This position has 6-10 Direct Reports</li></ul><p><b><br>
Travel Requirements:</b></p><ul><li>
No travel required.</li></ul><p><b><br>
Physical Requirements:</b></p><ul><li>
Most of the time is spent sitting in a comfortable position, and there is frequent opportunity to move about. On rare occasions, there may be a need to move or lift light articles.</li></ul><p><b><br>
Working Conditions:</b></p><ul><li>
Located in a comfortable indoor area. Any unpleasant conditions would be infrequent and not objectionable.</li></ul><p><b><br>
Minimum Qualifications:</b></p><ul><li>
Must be eighteen years of age or older.</li><li>
Must be legally permitted to work in the United States.</li><li>
5+ years of experience in Information Security, with at least 2 years focused on Cloud or SaaS security.</li><li>
2+ years of people management or technical leadership experience.</li><li>
Proven experience securing major enterprise SaaS platforms (e.g., Google Workspace, Microsoft 365, Salesforce, ServiceNow, Slack, Atlassian).</li></ul><p><b><br>
Preferred Qualifications:</b></p><ul><li>
Bachelor's degree in Computer Science, Information Systems, or a related field.</li><li>
Industry certifications: CISSP, CISM, CCSP, or vendor-specific certifications (e.g., Salesforce Certified Security Specialist).</li><li>
Experience with scripting/automation (Python, PowerShell) to automate governance tasks.</li><li>
Experience implementing Data Loss Prevention (DLP) policies across SaaS environments.</li></ul><p><b><br>
Minimum Education:</b></p><ul><li>
The knowledge, skills and abilities typically acquired through the completion of a bachelor's degree program or equivalent degree in a field of study related to the job.</li></ul><p><b><br>
Preferred Education:</b></p><ul><li>
No additional education</li></ul><p><b><br>
Minimum Years of Work Experience:</b></p><ul><li>
8 yrs</li></ul><p><b><br>
Preferred Years of Work Experience:</b></p><ul><li>
No additional years of experience</li></ul><p><b><br>
Minimum Leadership Experience:</b></p><ul><li>
2+ yrs</li></ul><p></p><p><b><br>
Competencies:</b></p><ul><li><b>
Leadership:</b> Proven ability to lead, motivate, and develop a team of security professionals.</li><li><b>
Technical Expertise:</b><ul><li>
Strong knowledge of Identity protocols: SAML, OIDC, SCIM, and OAuth.</li><li>
Familiarity with API security and interconnected SaaS risks (shadow IT, third-party app integrations).</li></ul></li><li><b>
Strategic Thinking:</b> Ability to prioritize risks in a fast-paced environment and translate technical security risks into business language for stakeholders.</li><li><b>
Communication:</b> Excellent written and verbal communication skills.</li><li><b>
Collaboration:</b> Proven ability to work effectively with cross-functional teams (IT, HR, Sales, etc.) to achieve common goals.</li></ul></div><p></p>

Cybersecurity Manager, SaaS (REMOTE)

Baylor Scott & White Health

<div><p><b>JOB SUMMARY</b></p><p><b>
Hybrid position</b></p><p>
The Cybersecurity Risk Manager plays a key role in strengthening the cyber risk management capabilities across a large, complex healthcare environment. This position leads a team responsible for identifying, assessing, and managing risks that impact clinical systems, patient data, operational continuity, and enterprise information assets.</p><p>
You will collaborate with technology, clinical, compliance, and operational teams to ensure risk‑management practices are:</p><ul><li> Well‑structured, repeatable, and aligned with industry frameworks such as NIST CSF 2.0.</li><li> Compliant with regulatory requirements, including the HIPAA Security Rule.</li></ul><p></p><p><b>
ESSENTIAL FUNCTIONS OF THE ROLE</b></p><p><b>
Risk Management Leadership</b></p><ul><li>
Lead a team of cybersecurity analysts executing risk identification, analysis, scoring, and monitoring.</li><li>
Guide the development and continual enhancement of risk‑management processes using industry frameworks (e.g., NIST CSF 2.0, HIPAA).</li><li>
Provide coaching, performance feedback, and professional development support to team members.</li><li>
Promote alignment and consistency across cybersecurity and IT functions regarding risk practices and governance.</li></ul><p><b>
Reporting &amp; Continuous Improvement</b></p><ul><li>
Develop clear, concise risk reporting through associated tooling, tailored for senior leaders and operational stakeholders.</li><li>
Track and measure progress through Objectives &amp; Key Results (OKRs) aligned to cybersecurity and organizational priorities.</li><li>
Identify opportunities to streamline processes, drive operational excellence, and improve transparency into cyber risk.</li></ul><p><b>
Risk Management &amp; Assessment</b></p><ul><li>
Oversee enterprise-wide cyber risk assessments, including but not limited to EHR systems, medical devices, IoT clinical equipment, and cloud-hosted PHI.</li><li>
Lead threat modeling and control evaluations based on NIST CSF 2.0 categories (Identify, Protect, Detect, Respond, Recover, Govern).</li><li>
Coordinate mitigation strategies with IT, Clinical Engineering, and operational leaders.</li><li><ul><li> Support risk-related governance forums and risk review discussions with leadership.</li></ul></li><li>
Maintain risk registers and compliance monitoring.</li></ul><p><b>
Compliance &amp; Regulatory Alignment</b></p><ul><li>
Continuously refine cyber risk processes informed by healthcare threat intelligence, regulatory changes, and HIPAA Security Rule requirements.</li><li>
Oversee periodic audits and corrective action tracking.</li><li>
Ability to execute tasks through tooling such as ServiceNow, M365, and Power BI.</li></ul><p></p><p><b>
KEY SUCCESS FACTORS</b></p><ul><li>
Master&rsquo;s Degree is preferred in Cybersecurity, Information Systems, Risk Management, or related field.</li><li>
Strong understanding of healthcare technology environments (e.g., EHR systems, clinical devices, PHI handling).</li><li>
Demonstrated ability to communicate risk effectively to both technical and non-technical audiences.</li><li>
Experience working within Agile delivery environments.</li><li>
Experience with NIST CSF 2.0, HITRUST, HIPAA Security Rule, and healthcare technology environments.</li><li>
Strong understanding of clinical workflows, EHR systems, and medical device cybersecurity.</li><li>
Proficiency with GRC and risk platforms.</li><li><p>
Certifications such as CISSP, CISM, CRISC, HCISPP, HITRUST CCSFP, or other relevant industry certifications are strongly preferred.</p><p></p><div><b><br>
BENEFITS</b><br>
<br>
Our competitive benefits package includes the following<br>
<ul><li>Immediate eligibility for health and welfare benefits</li><li>401(k) savings plan with dollar-for-dollar match up to 5%</li><li>Tuition Reimbursement</li><li>PTO accrual beginning Day 1</li></ul>
Note: Benefits may vary based upon position type and/or level</div></li></ul><b><br>
QUALIFICATIONS</b><br>
<br>
- EDUCATION - Bachelor's or 4 years of work experience above the minimum qualification<br>
<br>
- EXPERIENCE - 5 Years of Experience</div>

Cybersecurity Risk Manager - Healthcare

Kentro

<div>Overview:
<div>
Thank you for considering IT Concepts dba Kentro, where innovation drives opportunity and collaboration leads to success. Our dynamic community of experts is fully committed to advancing our customers' missions, fostering professional growth, and making a positive impact on our communities.<br>
</div><div></div><div>By joining our supportive community, you will find that Kentro is dedicated to your personal and professional development. Together, we can drive meaningful change, spark innovation, and achieve extraordinary milestones.</div><div></div><div><br>
Kentro is hiring for <b>a Cybersecurity Audit Manager</b> to coordinate and support all phases of cybersecurity‑related audit engagements across DOC, serving as the central liaison for planning, evidence curation, packaged responses, and follow‑up actions. The role covers OIG/GAO engagements, annual FISMA activities, OMB A‑123/FMFIA internal controls assessments, and cybersecurity elements of the Annual Financial Statement Audit (general coordination). The scope of this role covers audit coordination; the role does not perform formal control testing or own technical remediation.</div><div></div><div><br>
Additionally, the role supports program maturity by coordinating the continuous assessment of audit risks. It considers known weaknesses and audit recommendations and forecasts audit‑relevant risks from emerging technologies and external threats. These coordination efforts drive measurable improvements in cybersecurity posture and incremental gains in OIG FISMA outcomes</div><div></div><div><b><br>
Location: Hybrid in Washington, D.C.</b></div><div></div><div><b><br>
Salary Range: $90,000-100,000/annually. </b>Factors influencing pay within this range include geography, market demand, skills, education, experience, and other qualifications of the successful candidate.</div>
Responsibilities:
<div><b>
Cybersecurity Audit Management</b></div><ul><li>
Lead planning, coordination, and tracking of cybersecurity audits and assessments, including FISMA, OMB A‑123, FMFIA, and OIG and GAO engagements.</li><li>
Maintain the cybersecurity audit risk register, tracking risks, remediation plans, owners, milestones, and progress.
</li><li>Prepare packaged responses, corrective action plans (CAPs), audit artifacts, and closure documentation for delivery to oversight bodies.
</li><li>Develop or update audit playbooks, process documents, and guidance materials to standardize readiness and engagement execution.
</li><li>Coordinate entrance/exit conferences, walkthroughs, interviews, site visits; manage information requests and due dates.</li><li>
Support development of risk summaries, dashboards, and program‑level reporting (e.g., status of audit activities, open items, milestones).</li></ul><div><b>
Risk, Compliance &amp; Alignment</b></div><ul><li>
Monitor risks tied to High Value Assets (HVAs) and audit findings, providing periodic updates to leadership.
</li><li>Ensure coordination activities align with NIST RMF, NIST CSF, FISMA, applicable OMB guidance, and DOC cybersecurity policies.
</li><li>Track known weaknesses and recommendations to inform audit readiness and evidence planning.</li></ul><div><b>
Stakeholder Engagement</b></div><ul><li>
Serve as the primary liaison among OCRM, OCOS, ESOC, DOC Operating Units, auditors, and assessment teams.
</li><li>Provide clear communication, regular status updates, and issue escalation as needed to maintain schedule and quality.
</li><li>Develop concise briefings and summaries for leadership and audit stakeholders at key milestones (entrance, fieldwork, exit, close‑out).</li></ul><div><b>
Tools &amp; Platforms</b></div><ul><li>
Utilize CSAM (GRC) as the system of record for system security documentation and status.
</li><li>Manage engagement workflow and artifacts through the DOC Audit Management System (ServiceNow); maintain request logs, evidence, and dashboards.
</li><li>Use collaboration/reporting tools (e.g., SharePoint, Excel/Power BI, MS Project) for repository management, trackers, and executive‑ready summaries.</li></ul>
Qualifications:
<ul><li>Bachelor&rsquo;s degree in Cybersecurity, Information Assurance, Information Systems, or closely related field; or equivalent experience.
</li><li>5+ years coordinating Federal cybersecurity audits or oversight engagements (OIG, GAO, FISMA, A‑123/FMFIA, financial statement audits).
</li><li>Demonstrated ability to manage complex audit calendars, artifacts, and multi‑stakeholder coordination under tight deadlines.
</li><li>Strong writing and communication skills to synthesize technical topics into accurate packaged responses and briefings.
</li></ul><div><b>Qualifications and Certifications:
</b></div><ul><li>Required: Bachelor&rsquo;s degree in Cybersecurity/Information Assurance/Information Systems or closely related field.
</li><li>Preferred: PMP or FAC/PPM equivalent certification, CompTIA Security+ (or higher DoD 8570/8140‑aligned baseline</li></ul><div><b>
Key Competencies</b></div><ul><li>
Audit coordination &amp; stakeholder management
</li><li>Evidence curation discipline and accuracy
</li><li>Clear written communication; executive‑ready summarization
</li><li>Attention to detail; confidentiality and records stewardship
</li></ul><div><b>Clearance Requirement:</b></div><ul><li>
US Citizen or Green card holder</li><li>
Ability to obtain and maintain Public Trust adjudication.</li><li>
Must meet updated ID requirements: https://www.gsa.gov/technology/it-contract-vehicles-and-purchasing-programs/federal-credentialing-services/get-appointment-help/bring-required-documents<ul><li>
If you do not currently meet the ID requirements outlined, you must be willing and able to update your current forms of ID in a timely manner to complete the suitability process successfully.</li></ul></li></ul>
Benefits:
<div><b>
The Company</b></div><div>
We believe in generating success collaboratively, enabling long-term mission success, and building trust for the next challenge. With you as our partner, let&rsquo;s solve challenges, think innovatively, and maximize impact. As a valued member of our team, you have the unique opportunity to work in a diverse range of technology and business career paths, all while supporting our nation and delivering innovative technology solutions. We are a close community of experts that pride ourselves on creating an environment defined by teamwork, dedication, and excellence.</div><div></div><div><br>
We hold three ISO certifications (27001:2013, 20000-1:2011, 9001:2015), two CMMI ML 3 ratings (DEV and SVC) and CMMC Level 2 Certification.</div><div></div><div><b><br>
Industry Recognition</b></div><div>
Growth | Inc 5000&rsquo;s Fastest Growing Private Companies, DC Metro List Fastest Growing; Washington Business Journal: Fastest Growing Companies, Top Performing Small Technology Companies in Greater D.C.</div><div>
Culture | Northern Virginia Technology Council Tech 100 Honoree; Virginia Best Place to Work; Washington Business Journal: Best Places to Work, Corporate Diversity Index Winner &ndash; Mid-Size Companies, Companies Owned by People of Color; Department of Labor&rsquo;s HireVets for our work helping veterans transition; SECAF Award of Excellence finalist; Victory Military Friendly Brand; Virginia Values Veterans (V3); Cystic Fibrosis Foundation Corporate Breath Award</div><div></div><div><b><br>
Benefits</b></div><div>
We offer competitive benefits package including paid time off, healthcare benefits, supplemental benefits, 401k including an employer match, discount perks, rewards, and more. We invest in our employees &ndash; Every employee is eligible for education reimbursement for certifications, degrees, or professional development. Reimbursement amounts may fluctuate due to IRS limitations. We want you to grow as an expert and a leader and offer flexibility for you to take a course, complete a certification, or other professional growth and networking. We are committed to supporting your curiosity and sustaining a culture that prioritizes commitment to continuous professional development.</div><div>
We work hard; we play hard. Kentro is committed to incorporating fun into every day. We dedicate funds for activities &ndash; virtual and in-person &ndash; e.g., we host happy hours, holiday events, fitness &amp; wellness events, and annual celebrations. In alignment with our commitment to our communities, we also host and attend charity galas/events. We believe in appreciating your commitment and building a positive workspace for you to be creative, innovative, and happy.</div><div></div><div><b><br>
Commitment Equal Opportunity Employment &amp; VEVRAA
</b></div><div>Kentro is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state or local law.</div><div>
Kentro is strongly committed to compliance with VEVRAA and other applicable federal, state, and local laws governing equal employment opportunity. We have developed comprehensive policies and procedures to ensure our hiring practices align with these requirements.</div><div>
As part of our VEVRAA compliance efforts, Kentro has established an equal opportunity plan outlining our commitment to recruiting, hiring, and advancing protected veterans. This plan is regularly reviewed and updated to ensure its effectiveness.</div><div>
We encourage protected veterans to self-identify during the application process. This information is strictly confidential and will only be used for reporting and compliance purposes as required by law. Providing this information is voluntary and will not impact your employment eligibility.</div><div>
Our commitment to equal employment opportunity extends beyond legal compliance. We are dedicated to fostering an inclusive workplace where all employees, including protected veterans, are treated with dignity, respect, and fairness.</div><div></div><div><b><br>
How to Apply</b></div><div>
To apply to Kentro Positions- Please click on the job link and then click the blue &ldquo;Apply&rdquo; button at the top right of Job Description. Please upload your resume and complete all the application steps. You must fully submit the application for Kentro to consider you for a position. If you need alternative application methods, please email careers@kentro.us and request assistance.<br>
</div><div></div><div><b>Accommodations</b></div><div>
To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. Reasonable Accommodations may be made to enable qualified individuals with disabilities to perform the essential functions. If you need to discuss reasonable accommodations, please email careers@kentro.us.
</div><div>#LI-JG1</div></div>

Cybersecurity Audit Manager (Mid)

Turbo Consultin

<p>Role purpose: Leads practical, mission-aligned cybersecurity governance across customer's systems by driving assessment documentation, control implementation guidance, risk evaluations, contingency planning, POA&amp;M management, and cyber compliance reporting.</p><p>Core responsibilities</p><p>Provide actionable cybersecurity guidance to system and product teams on control implementation, risk mitigation, and compliance with federal and HHS requirements.</p><p>Develop, upload, maintain, and quality-check assessment artifacts including FIPS 199 categorizations, E-Authentication risk assessments, control implementation statements, and supporting evidence.</p><p>Evaluate cybersecurity risk for new capabilities, integrations, applications, plug-ins, and system connections before deployment.</p><p>Lead development, testing, and update cycles for system contingency plans, security SOPs, and governance playbooks.</p><p>Maintain POA&amp;M tracking, remediation coordination, vulnerability status reporting, and risk dashboards for leadership review.</p><p>Coordinate closely with engineering, operations, and incident response teams on vulnerability management, incident handling, and cyber data calls.</p><p>Support audit readiness and maintain evidence packages that withstand IV&amp;V, assessor, and government review.</p><p>Minimum qualifications</p><p>Bachelor&rsquo;s degree in cybersecurity, information assurance, computer science, or related field; master&rsquo;s degree preferred.</p><p>10+ years of cybersecurity risk, compliance, or RMF experience, including at least 5 years supporting federal systems.</p><p>Deep working knowledge of NIST RMF, FISMA, HHS/NIH controls, SSPs, POA&amp;Ms, contingency planning, and security documentation.</p><p>Proven ability to coordinate across technical and non-technical stakeholders in a fast-paced mission environment.</p><p>CISSP and CAP strongly preferred; CISM, FedRAMP Practitioner, or Zero Trust training desirable.</p><p>Experience with cloud security, SaaS governance, vulnerability scanning, and continuous monitoring.</p><p>Familiarity with risk repositories, evidence management, dashboards, and governance reporting.</p><p>Preferred qualifications / certifications</p><p>Experience supporting healthcare, research, or biomedical environments handling sensitive data.</p><p>Pay: $150,000.00 - $200,000.00 per year</p><p>Benefits:</p><ul><li>401(k)</li><li>401(k) matching</li><li>Dental insurance</li><li>Health insurance</li><li>Life insurance</li><li>Paid time off</li><li>Retirement plan</li><li>Vision insurance</li></ul><p>Work Location: Hybrid remote in Washington, DC 20036</p>

Cybersecurity Risk Manager

Search 10000+ Cybersecurity manager jobs near you this March. New roles added regularly across leading industries. Apply today.