[Hiring] Cybersecurity Lead / ISSM Support @DecisionPoint | Cortek

Role Description

DecisionPoint seeks a Cybersecurity Lead / ISSM Support professional to lead Task 6 cybersecurity delivery and support the Government Information System Security Manager (ISSM) in protecting USMEPCOM systems, applications, infrastructure, and information assets. This Subject Matter Expert will provide leadership across security governance, risk prioritization, policy maintenance, authorization activities, vulnerability remediation, and inspection readiness.

• Coordinate corrective actions across infrastructure, application, contractor, and Government teams.
• Ensure the accuracy of cybersecurity reporting and the timely closure of identified findings.
• Bring extensive experience leading cybersecurity operations in Department of Defense environments.
• Translate complex technical findings into clear, actionable risk recommendations for Government and program leadership.

This position is remote, with a preference for candidates located in the Chicago area.

Note: By applying to this position, you acknowledge and consent to having your resume included in an active competitive government contract bid.

Qualifications

• Active Secret clearance or higher.
• Bachelor’s degree in Cybersecurity, Information Systems, Computer Science, or a related field.
• Minimum of 12 years of relevant cybersecurity or information security experience.
• Current Certified Information Systems Security Professional (CISSP) certification.
• Demonstrated experience leading Department of Defense cybersecurity operations.
• Demonstrated ability to translate technical cybersecurity findings into actionable risk recommendations.

• Experience directly supporting a Government ISSM, Information System Security Officer, Authorizing Official, or system owner.
• Advanced knowledge of the DoD Risk Management Framework, including authorization package development, security-control assessment, continuous monitoring, and authorization maintenance.
• Experience applying DoDI 8510.01, NIST SP 800-53, FISMA, and related federal and DoD cybersecurity requirements.
• Experience supporting Authority to Operate and Authority to Connect activities in a DoD environment.
• Experience conducting or supporting vulnerability management using ACAS or Tenable, Endpoint Security Solutions, STIG Viewer, Security Content Automation Protocol tools, or comparable platforms.
• Experience managing IAVA, IAVM, Plan of Action and Milestones, and corrective-action remediation processes.
• Experience supporting Cybersecurity Readiness Inspections, security assessments, control testing, or Security Test and Evaluation activities.
• Experience with eMASS or comparable governance, risk, and compliance platforms.
• Experience developing cybersecurity policies, security plans, standard operating procedures, interconnection agreements, risk assessments, and executive briefings.
• Familiarity with ServiceNow or other workflow platforms used to manage security findings, risks, remediation activities, and performance reporting.
• Additional certifications such as CISM, CCSP, CGRC, CASP+, or equivalent advanced cybersecurity credentials.
• Familiarity with current DoD 8140 cybersecurity workforce qualification requirements.
• Strong leadership, stakeholder coordination, risk communication, analytical, and technical writing skills.
• Ability to lead multidisciplinary teams and manage multiple high-priority cybersecurity activities in a remote mission environment.

Requirements

• Lead delivery of ENLIST Task 6 cybersecurity activities and serve as the senior contractor cybersecurity subject matter expert.
• Support the Government ISSM in security governance, risk prioritization, policy maintenance, authorization support, and cybersecurity inspection readiness.
• Advise Government and program leadership on cybersecurity risks, compliance gaps, remediation priorities, and operational impacts.
• Lead coordination of cybersecurity remediation activities across infrastructure, application, service delivery, contractor, and Government teams.
• Support Risk Management Framework activities and the development, maintenance, review, and validation of authorization documentation.
• Support Authority to Operate and Authority to Connect activities for applicable networks, systems, applications, and software.
• Coordinate implementation and assessment of applicable NIST security controls and Department of Defense cybersecurity requirements.
• Oversee Information Assurance Vulnerability Alert and Information Assurance Vulnerability Management tracking and remediation.
• Coordinate recurring Assured Compliance Assessment Solution scans, analyze findings, and track vulnerabilities through remediation or approved risk acceptance.
• Review Endpoint Security Solutions reports and coordinate resolution of identified security issues.
• Develop, maintain, and monitor Plans of Action and Milestones, corrective-action plans, and other remediation records.
• Monitor corrective actions to ensure findings are assigned, documented, validated, and closed within required timeframes.
• Support certification and accreditation reviews, security control testing, Security Test and Evaluation activities, and development of associated test plans.
• Support Cybersecurity Readiness Inspection preparation, assessment activities, findings management, remediation, and follow-up reporting.
• Maintain and update the program Information Security Plan, cybersecurity policies, standard operating procedures, user guides, memoranda for record, and system interconnection agreements.
• Review and validate system access requests and support enforcement of approved access-control requirements.
• Evaluate systems and assets against applicable NIST, National Security Agency, Security Technical Implementation Guide, and approved desktop or platform security requirements.
• Monitor changes to cybersecurity regulations, policies, technical requirements, and threat conditions, and recommend corresponding updates to program controls and procedures.
• Produce accurate cybersecurity status reports, risk summaries, compliance metrics, inspection-readiness assessments, and executive-level briefings.
• Validate the accuracy and completeness of cybersecurity data used in program reports, dashboards, and Government submissions.
• Translate vulnerability data, security-control deficiencies, and technical findings into prioritized and actionable risk recommendations.
• Promote consistent cybersecurity practices, lessons learned, and continuous improvement across the ENLIST program.

Company Description