Cybersecurity SME (Remote)

GovCIO is currently hiring for a Cyber Security SME (Remote). This position is fully remote and available to candidates within the Continental United States (CONUS). 

The primary responsibility of the Cybersecurity SME is to support the objectives and mission of our VA Customer. The Cybersecurity SME must also manage mitigations to protect applications and networks. In compliance with the VA business needs and federal mandates, the work will include support for analysis/verification and monitoring of service performance. The Cybersecurity SME shall provide oversight for comprehensive expert cybersecurity and networking support to the CIO by:

• determining the impact of new technologies, software versions, or federal policy changes to application builds, web, networking, and maintenance;
• determining the impact of new technologies, software versions, or federal policy changes to based tools, virtual, and Cloud environments, in accordance with 508 compliance;
• conducting meetings, including preparing, documenting, and recording minutes;
• providing expert analysis and documentation for various analytical efforts focused on VA Office cybersecurity processes and procedures;
• reviewing various draft documents and providing timely feedback to federal IT employees and appointed collaborative contractors for VA Office business, infrastructure, and cloud hosting providers;
• contributing to the further development, enhancement, and implementation of VA Office information systems, cybersecurity assessments, communication plans, strategic and tactical goals, and objectives determined by the VA Office IT federal management;
• attending FISMA working group meetings as assigned by the CISO/ISSO.
• assisting in researching and compiling FISMA reporting data, artifacts, and points of contact;

Supporting and preparing documents for submission such as:

• VA Office Cybersecurity report templates and audit metrics
• VA Office Cybersecurity monthly report
• VA Office System Security Plan
• VA Office Certification and Accreditation
• VA Office Authority to Operate (ATO) and future federally mandated initiatives

Using VA Office and agency approved tools, maintaining FISMA documentation, artifact inventory, and Plan of Action & Milestone (POA&M) reports and testing in DOJ required format;

• preparing FISMA reporting documents monthly, quarterly, and annually as required;
• reporting on FISMA information systems and submitting POA&M reports monthly;
• maintaining a tracking system of all VA Office federal IT and Office Change Control Board (CCB) information and relatable security and IT project-related deliverables (regularly scheduled and ad hoc implementations);
• contributing to the further development, enhancement, and implementation of VA Office audit responses to federal ad hoc reporting requirements;
• updating cybersecurity project charters and project management plans monthly, quarterly, and yearly as required;
• participating in special projects as required
• being available 24/7 to respond to system outages; and security incidents;

Preparing meeting agenda’s, minutes, and diagrams as required by VA Office CIO and ISSO; and contributing to the further development, enhancement, and implementation of VA Office and federally mandated compliance initiatives and policies such as but not limited to:

• Homeland Security Presidential Directive 12 (HSPD-12)
• Federal Information Processing Standards (FIPS)
• Federal Information Security Management Act (FISMA)
• NIST Risk Management Framework (RMF)
• SP 800-53 and 53A Revision 4 (Security and Privacy Controls)
• NIST SP 800-137 Information Security Continuous Monitoring (ISCM) for Federal Information Systems and Organizations
• NIST Security Content Automation Protocol (SCAP) Validated Products
• Federal Risk and Authorization Management Program (FedRAMP)

Required Skills and Experience:

• Bachelor's with 12+ years (or commensurate experience)

Preferred Skills and Experience:

• Certified Information Systems Security Professional (CISSP)
• Certified Ethical Hacker (CEH)
• Certified Authorization Professional (CAP)
• Certified Network Defense Architect (CNDA)
• Certified Information Systems Auditor (CISA)

Clearance Required:  Ability to obtain and maintain a Public Trust clearance (Tier 4 high risk).

GovCIO is a team of transformers--people who are passionate about transforming government IT. Every day, we make a positive impact by delivering innovative IT services and solutions that improve how government agencies operate and serve our citizens.

But we can't do it alone. We need great people to help us do great things - for our customers, our culture, and our ability to attract other great people. We are changing the face of government IT and building a workforce that fuels this mission. Are you ready to be a transformer?

We are an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, gender, gender identity or expression, sexual orientation, national origin, disability, or status as a protected veteran. EOE, including disability/vets.

Posted Pay Range

The posted pay range, if referenced, reflects the range expected for this position at the commencement of employment, however, base pay offered may vary depending on multiple individualized factors, including market location, job-related knowledge, skills, education, experience, and internal equity. The total compensation package for this position may also include other compensation elements, to be discussed during the hiring process. If hired, employee will be in an “at-will position” and the GovCIO reserves the right to modify base salary (as well as any other discretionary payment or compensation program) at any time, including for reasons related to individual performance, GovCIO or individual department/team performance, and market factors.