[Hiring] Information System Security Lead Consultant @Safal Partners

Role Description

Safal Partners is seeking an experienced Information System Security Lead to manage the security of a federal project website. Working as a 1099 consultant, you will own the website’s security compliance program from start to finish:

• Continuous monitoring
• Risk Management Framework (RMF) documentation
• Vulnerability management
• Access control
• Incident response
• Contingency planning

All in line with ED Information Assurance Services requirements. This role suits a hands-on federal security professional who is comfortable with FedRAMP and CSAM, can keep ATO-related documentation current and audit-ready. The position requires an active U.S. Department of Education Public Trust certification.

Qualifications

• U.S. Department of Education security clearance (Public Trust Certification) is required
• FedRAMP experience
• Cyber Security Assessment and Management (CSAM) experience

Requirements

• Execute continuous monitoring tasks per ED Information Assurance Services requirements
• Maintain NIST and Risk Management Framework (RMF) compliance
• Develop and manage Plans of Action and Milestones (POA&Ms)
• Conduct annual self-assessments following ED protocols
• Monitor Authorization to Operate (ATO) status and renewals, as relevant
• Implement DHS Binding Operational Directive (BOD) requirements
• Conduct monthly vulnerability scans and remediation
• Oversee identity and access management systems
• Maintain secure access controls and user permissions
• Manage SSL certificate maintenance and updates
• Lead security incident response planning and execution
• Coordinate annual tabletop exercises for the Incident Response Plan
• Track and document security incidents
• Maintain the Contingency Plan (CP) and disaster recovery procedures
• Ensure compliance with Recovery Time and Recovery Point Objectives (RTO/RPO)
• Manage system security documentation, including the System Security Plan (SSP)
• Maintain security documentation and compliance records
• Generate security assessment reports
• Update security-related standard operating procedures (SOPs)
• Optional: Support completion of required website/extranet paperwork

Benefits

• Job Type: 1099 contractor
• Location: Remote, must be authorized to work in the United States