Senior Cybersecurity Risk and Compliance Specialist

Vmd Agency - Annapolis Junction, MD

Full-time - Senior

Remote - Annapolis Junction, MD

Support Activities for Transportation

About the position

The Senior Cybersecurity Risk and Compliance Specialist at VMD Corp plays a crucial role in delivering security and compliance expertise to support various IT projects and initiatives, particularly within the Transportation Security Administration (TSA). This position focuses on ensuring compliance with cybersecurity requirements, performing risk assessments, and developing remediation plans to mitigate cybersecurity risks. The role emphasizes collaboration, leadership, and the application of best practices in cybersecurity to enhance the security of critical transportation systems.

Responsibilities

• Actively participate and lead meetings to review and assess compliance of systems and technology.
• Perform risk assessments based on Federal guidelines and industry best practices.
• Leverage existing government-provided security scan tools such as Tenable Security Center, Nessus, DbProtect, Venafi, RedSeal, Burp Suite Pro and others.
• Assist teams in identifying vulnerabilities and providing recommendations to reduce cybersecurity risk.
• Articulate and report on cybersecurity risk and compliance to executives and senior leaders.
• Continually improve the cybersecurity risk assessment and POA&M process and program.
• Aggregate and track cybersecurity POA&Ms and risks across projects, teams, and programs.
• Monitor and triage security incidents as appropriate for specific systems.
• Communicate cybersecurity best practices based on policies, standards, and controls.

Requirements

• 10+ years of cybersecurity and compliance experience.
• Active Certified Information Systems Security Professional (CISSP) or Certified Information Security Manager (CISM) certification.
• Strong leadership and interpersonal skills to facilitate effective collaboration across a variety of stakeholders.
• Demonstrated ability to function independently and define the proper methods & procedures.
• Understanding of guiding cybersecurity principles and control guidance.
• Effective writing skills to capture issues and recommendations.
• Strong customer relationship building ability.

Benefits

• Professional development opportunities
• Employee-first culture
• Hybrid telecommuting options