Critical Infrastructure Risk Management Lead

MITRE Job Opportunity

Why choose between doing meaningful work and having a fulfilling life? At MITRE, you can have both. That's because MITRE people are committed to tackling our nation's toughest challenges—and we're committed to the long-term well-being of our employees. MITRE is different from most technology companies. We are a not-for-profit corporation chartered to work for the public interest, with no commercial conflicts to influence what we do.

The R&D centers we operate for the government create lasting impact in fields as diverse as cybersecurity, healthcare, aviation, defense, and enterprise transformation. We're making a difference every day—working for a safer, healthier, and more secure nation and world. Our workplace reflects our values. We offer competitive benefits, exceptional professional development opportunities for career growth, and a culture of innovation that embraces adaptability, collaboration, technical excellence, and people in partnership.

If this sounds like the choice you want to make, then choose MITRE - and make a difference with us.

Our nation's ability to defend the homeland, deter aggression, and build a resilient Joint force rests on our capacity to identify, prioritize, and successfully field the optimal set of effective, suitable, and survivable systems. We must re-envision national security to keep pace with advanced adversaries, leveraging the entire spectrum of the Nation's Innovation Base, while creating and leveraging a growing set of new options and authorities for accelerating Joint and whole-of-nation capabilities.

That's where MITRE's Acquisition Studies & Analysis (ASA) Department comes in. We are a diverse group of defense acquisition experts, operations research / system analysts, cybersecurity professionals, and communication systems engineers– all with a united passion to solve problems for a safer world. We're experienced professionals who advise senior leaders and decision-makers across the national security enterprise. Our evidence-based work garners visibility and provokes thought and action.

We're team players who build partnerships across government, industry, academia, and research centers.

And above all - we bring objectivity, innovation, courage, and technical excellence to help our sponsors make the right decision.

Roles & Responsibilities:

MITRE's ASA Department seeks a well-connected and recognized expert on risk management for critical infrastructure systems and associated technology. The ideal candidate will be a credible authority on critical infrastructure risk management, understanding how critical infrastructure supports weapons systems and other associated platforms, understanding of established cyber capabilities (e.g., D3

FEND, D3

FEND for OT, ATT&CK, ATT&CK for ICS, Crown Jewels Analysis for Control Systems), foundational understanding of operational technologies and control systems, knowledge of established industry standards and guidance (i.e., ISA/IEC 62443, NIST 800-82, NIST 800-30), ability to write reports focused on operational technology security in risk terms, lead complex operational technology related projects across numerous efforts, and develop frameworks, policies, processes, and procedures.

You will belong to a high-performing team that regularly initiates and implements projects in support of sponsors' strategic initiatives, often before a sponsor can fully recognize or articulate that they are needed. The team may publish, speak at high visibility events, and advise senior government officials along with their performers from various organizations.

Responsibilities include:

• Effectively engage and lead sponsors, stakeholders, performers regarding planning, execution, and documentation of workshops, outcomes, and follow on activities.
• Develop and propose innovative strategies, policies, and processes that improve risk management to critical infrastructure, ranging from programs, portfolios, and enterprise-wide initiatives.
• Contribute with impact as part of one or more integrated product teams to enable DoW to transition emerging technologies and prototypes into fielded operational capabilities for risk management.
• Strategically communicate internally and externally on key issues related to critical infrastructure cybersecurity and resilience.
• Regularly report status updates to government employees along with their performers from various organizations
• Build and manage relationships between senior sponsors, MITRE, and other stakeholders (Federally Funded Research & Development Centers (FFRDCs), University Affiliated Research Centers (UARCs), Industry, academia).
• Increase collaboration and coordination on critical infrastructure cybersecurity and cyber resilience across federal, state, and industry to improve identified issues within policy, standards, risk management, etc.
• Provide subject matter expertise and drive consistent risk management capabilities across organizational, country, and bureaucracy boundaries.

Basic…