[Hiring] Senior Cybersecurity Assessment Lead @VMD Corp

Role Description

As a Senior Cybersecurity Assessment Lead, you will support a government cybersecurity assessment and oversight program focused on strengthening enterprise security governance, operational resilience, and mission assurance. In this role, you will serve as an independent assessor, program contributor, and project leader responsible for:

• Evaluating the deployment, effectiveness, and operational maturity of cybersecurity implementations across government systems, enterprise platforms, cloud environments, and security programs.
• Ensuring compliance with applicable federal requirements, mandates, and laws.
• Actively participating in and leading assessments while helping drive assessment-related initiatives from planning through completion.
• Contributing to the development and communication of program strategy, translating strategic objectives into actionable plans, priorities, processes, and measurable outcomes.
• Supporting the continued evolution of the assessment program through the development of maturity models, assessment methodologies, strategic plans, and process documentation.
• Collaborating with a team of assessors to foster a culture of knowledge sharing, continuous improvement, and technical excellence.

Responsibilities

• Conduct in-depth technical, operational, and programmatic inspections, assessments, and audits of agency systems, applications, and enterprise services.
• Provide task and project leadership, work allocation, and mentorship to team members across assigned assessments and program initiatives.
• Establish priorities, track actions and dependencies, remove obstacles, and drive work to timely completion.
• Perform quality assurance reviews of deliverables and ensure the timely, accurate completion of assessment activities and associated reporting milestones.
• Collect, analyze, and present accurate, risk-informed IT and cybersecurity technical and programmatic information.
• Support the maturation and continuous improvement of the cybersecurity assessment program.
• Help define, develop, and communicate program strategy and strategic objectives.
• Develop, document, and maintain program processes, procedures, standards, and assessment methodologies.
• Lead and/or contribute to projects and strategic initiatives supporting the assessment program.
• Support enterprise strategic planning and program oversight initiatives.
• Provide executive-level input on program status, risk posture, performance metrics, and trend analysis.
• Serve as a senior technical and programmatic advisor to assessment leadership and customer stakeholders.
• Obtain and maintain DOE Derivative Classifier certification(s) as required.
• Maintain required professional certifications through continuous professional education (CPE) and ongoing professional development.

Qualifications

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Engineering, or a related discipline, with 10+ years of relevant professional experience, including 8+ years of dedicated cybersecurity experience.
• At least one DoD 8570 / 8140 compliant certification at the IAT Level III or IAM Level III level, such as CISSP, CISM, CASP+, CISA, GSLC, or GCIH.
• Demonstrated expert-level experience leading and conducting IT and cybersecurity inspections, independent assessments, compliance reviews, and audit activities.
• Demonstrated experience leading projects or complex initiatives.
• Demonstrated ability to contribute to and/or develop organizational or program strategy.
• Deep working knowledge of federal cybersecurity requirements, mandates, and compliance frameworks.
• Exceptional verbal and written communication skills.
• Active or current DOE Q Clearance or Top Secret clearance with SCI eligibility.
• U.S. Citizenship required.

Desired Qualifications and Skills

• Demonstrated subject matter expertise in federal cybersecurity baseline requirements.
• Strong knowledge of organizational maturity assessment models.
• Demonstrated experience developing strategic plans, capability roadmaps, program strategies, or similar strategic planning artifacts.
• Exceptional written communication skills.
• Demonstrated project management experience.
• Hands-on experience in secure configuration management and system hardening.
• Demonstrated experience securing cloud environments.
• Working knowledge of Zero Trust principles, architectures, and maturity frameworks.
• Experience supporting enterprise vulnerability management programs.
• Prior experience serving in an Information System Security Manager (ISSM) or equivalent cybersecurity leadership role.

Travel and Telecommuting

• Travel: Significant (between 25%-50%).
• Telecommute Options: Remote, with frequent travel. Work will be conducted at various sites across the continental US.