Cybersecurity Compliance Senior Consultant

$109,100 - $163,700/Yr

Navigant Consulting - Washington, DC

Full-time - Mid Level

Washington, DC

Professional, Scientific, and Technical Services

About the position

The Cybersecurity Compliance Senior Consultant at Guidehouse is responsible for ensuring cybersecurity audit preparation, execution, and remediation management for a classified network service provider. This role involves researching compliance requirements, supporting self-assessments, managing audit processes, and creating reports for auditors, all while maintaining a focus on federal and intelligence community standards.

Responsibilities

• Researching and analyzing federal and intelligence community IT and cybersecurity compliance requirements including NIST standards, FISMA requirements, Intelligence Community Directives and Standards, and Center for National Security Systems (CNSS) Instructions.
• Supporting execution of compliance self-assessments.
• Creation and maintenance of self-assessment reports that capture current compliance states, remediation plans, and resourcing requirements.
• Performing compliance gap analyses and developing Plans of Action and Milestones (POAMs) to address compliance gaps.
• Developing audit preparation roadmaps and POAMs.
• Supporting execution of audit preparation roadmaps and POAM tasks.
• Identification of compliance artifact and evidence requirements.
• Creation of reports and artifact packages to be delivered to auditors.
• Audit execution management, including communication with and direct interaction with auditors, management of audit schedules and events, and coordination of status reporting to leadership.
• Analysis of audit results and creation of remediation POAMs.
• Preparation of POAM progress reports for cybersecurity and executive leadership.

Requirements

• An ACTIVE and MAINTAINED TOP SECRET Federal or DoD security clearance
• Bachelor's degree
• THREE (3) years of work experience in cybersecurity

Nice-to-haves

• Experience as a federal cybersecurity auditor
• Professional certifications such as CISM or CISA, or master's degree in cybersecurity or technical management
• Experience implementing technical security controls in accordance with compliance standards
• Experience evaluating technical security controls
• Demonstrated experience executing cybersecurity and IT audits or inspections
• Demonstrated ability to interpret and communicate cybersecurity and IT compliance requirements
• Demonstrated ability to support multidisciplinary IT or cybersecurity initiatives and projects
• Strong technical communication and writing skills

Benefits

• Medical, Rx, Dental & Vision Insurance
• Personal and Family Sick Time & Company Paid Holidays
• Position may be eligible for a discretionary variable incentive bonus
• Parental Leave and Adoption Assistance
• 401(k) Retirement Plan
• Basic Life & Supplemental Life
• Health Savings Account, Dental/Vision & Dependent Care Flexible Spending Accounts
• Short-Term & Long-Term Disability
• Student Loan PayDown
• Tuition Reimbursement, Personal Development & Learning Opportunities
• Skills Development & Certifications
• Employee Referral Program
• Corporate Sponsored Events & Community Outreach
• Emergency Back-Up Childcare Program
• Mobility Stipend