Cybersecurity Compliance Managing Consultant

$125,600 - $188,400/Yr

Navigant Consulting - Washington, DC

Full-time - Mid Level

Washington, DC

Professional, Scientific, and Technical Services

About the position

The Cybersecurity Compliance Managing Consultant at Guidehouse is responsible for overseeing cybersecurity audit preparation, execution, and remediation management for a classified network service provider. This role involves ensuring compliance with federal and intelligence community IT and cybersecurity requirements, managing self-assessments, and coordinating audit activities.

Responsibilities

• Researching and analyzing federal and intelligence community IT and cybersecurity compliance requirements including NIST standards, FISMA requirements, Intelligence Community Directives and Standards, and Center for National Security Systems (CNSS) Instructions.
• Managing execution of compliance self-assessments.
• Creation and maintenance of self-assessment reports that capture current compliance states, remediation plans, and resourcing requirements.
• Performing compliance gap analyses and developing Plans of Action and Milestones (POAMs) to address compliance gaps.
• Developing audit preparation roadmaps and POAMs.
• Managing execution of audit preparation roadmaps and POAM tasks.
• Identification of compliance artifact and evidence requirements.
• Creation of reports and artifact packages to be delivered to auditors.
• Audit execution management, including communication with and direct interaction with auditors, management of audit schedules and events, and coordination of status reporting to leadership.
• Analysis of audit results and creation of remediation POAMs.
• Preparation of POAM progress reports for cybersecurity and executive leadership.

Requirements

• An ACTIVE and MAINTAINED TOP SECRET Federal or DoD security clearance
• Bachelor's degree
• SIX (6) years of work experience in cybersecurity
• Ability to work onsite at client site in Washington D.C. a minimum of three days a week.

Nice-to-haves

• Experience as a federal compliance program manager or cybersecurity auditor.
• Professional certifications such as CISM or CISA, or master's degree in cybersecurity or technical management.
• Experience implementing technical security controls in accordance with compliance standards.
• Experience evaluating technical security controls.
• Experience with Intelligence Community and National Security System cybersecurity requirements.
• Understanding of Zero Trust concepts.
• Demonstrated experience executing cybersecurity and IT audits or inspections.
• Demonstrated ability to interpret and communicate cybersecurity and IT compliance requirements.
• Demonstrated ability to manage multidisciplinary IT or cybersecurity initiatives and projects.
• Strong technical communication and writing skills.

Benefits

• Medical, Rx, Dental & Vision Insurance
• Personal and Family Sick Time & Company Paid Holidays
• Position may be eligible for a discretionary variable incentive bonus
• Parental Leave and Adoption Assistance
• 401(k) Retirement Plan
• Basic Life & Supplemental Life
• Health Savings Account, Dental/Vision & Dependent Care Flexible Spending Accounts
• Short-Term & Long-Term Disability
• Student Loan PayDown
• Tuition Reimbursement, Personal Development & Learning Opportunities
• Skills Development & Certifications
• Employee Referral Program
• Corporate Sponsored Events & Community Outreach
• Emergency Back-Up Childcare Program
• Mobility Stipend