Overview:
DecisionPoint seeks a Cybersecurity Lead / ISSM Support professional to lead Task 6 cybersecurity delivery and support the Government Information System Security Manager (ISSM) in protecting USMEPCOM systems, applications, infrastructure, and information assets.
This Subject Matter Expert will provide leadership across security governance, risk prioritization, policy maintenance, authorization activities, vulnerability remediation, and inspection readiness. The Cybersecurity Lead will coordinate corrective actions across infrastructure, application, contractor, and Government teams while ensuring the accuracy of cybersecurity reporting and the timely closure of identified findings.
The successful candidate will bring extensive experience leading cybersecurity operations in Department of Defense environments and the ability to translate complex technical findings into clear, actionable risk recommendations for Government and program leadership.
This position is remote, with a preference for candidates located in the Chicago area.
Note: By applying to this position, you acknowledge and consent to having your resume included in an active competitive government contract bid.
Duties & Responsibilities:
The Cybersecurity Lead / ISSM Support professional will:
- Lead delivery of ENLIST Task 6 cybersecurity activities and serve as the senior contractor cybersecurity subject matter expert.
- Support the Government ISSM in security governance, risk prioritization, policy maintenance, authorization support, and cybersecurity inspection readiness.
- Advise Government and program leadership on cybersecurity risks, compliance gaps, remediation priorities, and operational impacts.
- Lead coordination of cybersecurity remediation activities across infrastructure, application, service delivery, contractor, and Government teams.
- Support Risk Management Framework activities and the development, maintenance, review, and validation of authorization documentation.
- Support Authority to Operate and Authority to Connect activities for applicable networks, systems, applications, and software.
- Coordinate implementation and assessment of applicable NIST security controls and Department of Defense cybersecurity requirements.
- Oversee Information Assurance Vulnerability Alert and Information Assurance Vulnerability Management tracking and remediation.
- Coordinate recurring Assured Compliance Assessment Solution scans, analyze findings, and track vulnerabilities through remediation or approved risk acceptance.
- Review Endpoint Security Solutions reports and coordinate resolution of identified security issues.
- Develop, maintain, and monitor Plans of Action and Milestones, corrective-action plans, and other remediation records.
- Monitor corrective actions to ensure findings are assigned, documented, validated, and closed within required timeframes.
- Support certification and accreditation reviews, security control testing, Security Test and Evaluation activities, and development of associated test plans.
- Support Cybersecurity Readiness Inspection preparation, assessment activities, findings management, remediation, and follow-up reporting.
- Maintain and update the program Information Security Plan, cybersecurity policies, standard operating procedures, user guides, memoranda for record, and system interconnection agreements.
- Review and validate system access requests and support enforcement of approved access-control requirements.
- Evaluate systems and assets against applicable NIST, National Security Agency, Security Technical Implementation Guide, and approved desktop or platform security requirements.
- Monitor changes to cybersecurity regulations, policies, technical requirements, and threat conditions, and recommend corresponding updates to program controls and procedures.
- Produce accurate cybersecurity status reports, risk summaries, compliance metrics, inspection-readiness assessments, and executive-level briefings.
- Validate the accuracy and completeness of cybersecurity data used in program reports, dashboards, and Government submissions.
- Translate vulnerability data, security-control deficiencies, and technical findings into prioritized and actionable risk recommendations.
- Promote consistent cybersecurity practices, lessons learned, and continuous improvement across the ENLIST program.
Qualifications:
Required Qualifications:
- Active Secret clearance or higher.
- Bachelor’s degree in Cybersecurity, Information Systems, Computer Science, or a related field.
- Minimum of 12 years of relevant cybersecurity or information security experience.
- Current Certified Information Systems Security Professional (CISSP) certification.
- Demonstrated experience leading Department of Defense cybersecurity operations.
- Demonstrated ability to translate technical cybersecurity findings into actionable risk recommendations.
Preferred Qualifications:
- Experience directly supporting a Government ISSM, Information System Security Officer, Authorizing Official, or system owner.
- Advanced knowledge of the DoD Risk Management Framework, including authorization package development, security-control assessment, continuous monitoring, and authorization maintenance.
- Experience applying DoDI 8510.01, NIST SP 800-53, FISMA, and related federal and DoD cybersecurity requirements.
- Experience supporting Authority to Operate and Authority to Connect activities in a DoD environment.
- Experience conducting or supporting vulnerability management using ACAS or Tenable, Endpoint Security Solutions, STIG Viewer, Security Content Automation Protocol tools, or comparable platforms.
- Experience managing IAVA, IAVM, Plan of Action and Milestones, and corrective-action remediation processes.
- Experience supporting Cybersecurity Readiness Inspections, security assessments, control testing, or Security Test and Evaluation activities.
- Experience with eMASS or comparable governance, risk, and compliance platforms.
- Experience developing cybersecurity policies, security plans, standard operating procedures, interconnection agreements, risk assessments, and executive briefings.
- Familiarity with ServiceNow or other workflow platforms used to manage security findings, risks, remediation activities, and performance reporting.
- Additional certifications such as CISM, CCSP, CGRC, CASP+, or equivalent advanced cybersecurity credentials.
- Familiarity with current DoD 8140 cybersecurity workforce qualification requirements.
- Strong leadership, stakeholder coordination, risk communication, analytical, and technical writing skills.
- Ability to lead multidisciplinary teams and manage multiple high-priority cybersecurity activities in a remote mission environment.
Our Equal Employment Opportunity Policy:
- EEO and Affirmative Action Policy: DecisionPoint Corporation is an Equal Employment Opportunity and Affirmative Action employer. It is the policy of DecisionPoint Corporation to provide equal employment opportunity in accordance with all applicable Equal Employment Opportunity/Affirmative Action laws, directives and regulations to all employees and qualified applicants without regard to race, ethnicity, color, religion, national origin, sex, age, disability status, pregnancy, sexual orientation, gender identity, genetic information, protected veteran status, or any other protected status under Federal, State or Local laws.
- Pay Transparency Policy: In accordance with Presidential Executive Order 13665, DecisionPoint Corporation will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant. However, employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or action, including an investigation conducted by the employer, or (c) consistent with the contractor's legal duty to furnish information.
- Authorization to Share Resume and Personal Information: By expressing your interest and submitting your resume for this position, you authorize DecisionPoint Corporation to share your resume, as well as personal information included on the resume, with its subsidiaries, affiliates and teaming partners for the purpose of considering you for this position and other available positions requiring comparable skills, education and experience. Should DecisionPoint Corporation. or its affiliates and teaming partners wish to initiate pre-employment discussions, you will be asked to complete an employment application and related employment documents.