[Hiring] Cyber Security Lead @Sprezzatura Management Consulting

Role Description

We are seeking a Cyber Security Lead to join our team. In this role, you will provide strategic leadership for the programs cybersecurity initiatives while overseeing day-to-day security operations, compliance, risk management, and team performance. This role serves as the primary cybersecurity advisor to program leadership, ensuring the security posture aligns with federal requirements, operational objectives, and industry best practices. The ideal candidate is an experienced leader who can translate cybersecurity strategy into operational execution while building and developing a high-performing team.

Responsibilities

• Strategic Cybersecurity Leadership
  • Serve as the primary cybersecurity liaison for internal leadership, technical teams, customers, and external stakeholders.
  • Define and execute the cybersecurity strategy, vision, priorities, and roadmap in alignment with organizational goals and federal security requirements.
  • Partner with program leadership, engineering teams, and product owners to integrate cybersecurity into program planning and delivery.
  • Foster a proactive security culture by promoting security awareness and collaboration across the organization.
• Cybersecurity Operations
  • Lead the daily operations of the cybersecurity team, ensuring efficient execution of security activities and operational priorities.
  • Manage workload distribution, establish priorities, and monitor team performance to ensure timely, high-quality deliverables.
  • Recruit, onboard, mentor, and develop cybersecurity professionals while fostering a collaborative, high-performing team environment.
  • Conduct performance management, coaching, and career development to build organizational capability and support long-term growth.
• Security Compliance, Risk Management & Governance
  • Ensure compliance with applicable federal cybersecurity requirements, including NIST, FISMA, Authorization to Operate (ATO), VA policies, and other regulatory frameworks.
  • Lead security assessments, risk analyses, threat modeling activities, and control evaluations to identify and mitigate organizational risk.
  • Develop, maintain, and continuously improve cybersecurity policies, standard operating procedures (SOPs), incident response plans, and governance documentation.
  • Oversee the tracking, validation, and documentation of corrective actions to ensure timely risk mitigation and audit readiness.
• Vulnerability Management & Security Operations
  • Direct enterprise vulnerability management activities, including identification, prioritization, remediation coordination, and validation of security findings.
  • Collaborate with technical teams to ensure vulnerabilities are remediated within established service-level objectives and compliance timelines.
  • Monitor the effectiveness of security controls and operational processes, identifying opportunities to strengthen the organization's cybersecurity posture.
  • Drive continuous process improvement through operational efficiencies, automation, and implementation of security best practices.
• Performance Reporting & Continuous Improvement
  • Establish and maintain cybersecurity metrics, dashboards, and key performance indicators (KPIs) to measure program effectiveness.
  • Prepare executive-level reports and briefings that communicate cybersecurity posture, operational performance, compliance status, and emerging risks.
  • Analyze operational trends to identify improvement opportunities and recommend strategic initiatives that enhance cybersecurity maturity.
  • Champion continuous improvement by evaluating new technologies, optimizing processes, and supporting ongoing analyst training and professional development.

Qualifications

• Must be able to obtain and maintain the appropriate VA background investigation and PIV credential required to perform the role.
• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Information Systems, or a related field (or equivalent combination of education and experience) and additional relevant experience may be substituted for education in accordance with contract guidelines.
• Minimum of 5–8 years of progressive cybersecurity experience, including leadership or supervisory responsibilities.
• Demonstrated experience implementing and managing cybersecurity programs aligned with NIST, FISMA, and ATO requirements.
• Demonstrated ability to communicate effectively with technical teams, stakeholders, and leadership, including presenting cyber status, risks, and recommendations.
• Strong leadership, communication, and stakeholder management skills with the ability to engage technical and executive audiences.
• Experience developing policies, procedures, operational playbooks, and executive reporting.
• Demonstrated ability to coordinate across cross-functional teams and drive alignment on security priorities and execution.

Requirements

• Professional cybersecurity certifications such as CISSP, CISM, Security +, or equivalent.

Benefits

• Medical, Dental, and Vision.
• Health Saving Account (when enrolled in eligible plan) with Company contribution.
• Company paid Life, Accidental Death, Short-term & Long-term Disability.
• Voluntary Accident, Hospital Indemnity, & Critical Care Insurance.
• Voluntary Medical & Dependent Care Flexible Spending Accounts.
• Accrued Paid Time Off & Company Paid Holidays.
• 401(k) Retirement Plan with Company match.