Cybersecurity Lead​/ISSM

DecisionPoint seeks a Cybersecurity Lead / ISSM Support professional to lead Task 6 cybersecurity delivery and support the Government Information System Security Manager (ISSM) in protecting USMEPCOM systems, applications, infrastructure, and information assets.

This Subject Matter Expert will provide leadership across security governance, risk prioritization, policy maintenance, authorization activities, vulnerability remediation, and inspection readiness. The Cybersecurity Lead will coordinate corrective actions across infrastructure, application, contractor, and Government teams while ensuring the accuracy of cybersecurity reporting and the timely closure of identified findings.

The successful candidate will bring extensive experience leading cybersecurity operations in Department of Defense environments and the ability to translate complex technical findings into clear, actionable risk recommendations for Government and program leadership.

This position is remote, with a preference for candidates located in the Chicago area.

The Cybersecurity Lead / ISSM Support professional will:

• Lead delivery of ENLIST Task 6 cybersecurity activities and serve as the senior contractor cybersecurity subject matter expert.
• Support the Government ISSM in security governance, risk prioritization, policy maintenance, authorization support, and cybersecurity inspection readiness.
• Advise Government and program leadership on cybersecurity risks, compliance gaps, remediation priorities, and operational impacts.
• Lead coordination of cybersecurity remediation activities across infrastructure, application, service delivery, contractor, and Government teams.
• Support Risk Management Framework activities and the development, maintenance, review, and validation of authorization documentation.
• Support Authority to Operate and Authority to Connect activities for applicable networks, systems, applications, and software.
• Coordinate implementation and assessment of applicable NIST security controls and Department of Defense cybersecurity requirements.
• Oversee Information Assurance Vulnerability Alert and Information Assurance Vulnerability Management tracking and remediation.
• Coordinate recurring Assured Compliance Assessment Solution scans, analyze findings, and track vulnerabilities through remediation or approved risk acceptance.
• Review Endpoint Security Solutions reports and coordinate resolution of identified security issues.
• Develop, maintain, and monitor Plans of Action and Milestones, corrective-action plans, and other remediation records.
• Monitor corrective actions to ensure findings are assigned, documented, validated, and closed within required time frames.
• Support certification and accreditation reviews, security control testing, Security Test and Evaluation activities, and development of associated test plans.
• Support Cybersecurity Readiness Inspection preparation, assessment activities, findings management, remediation, and follow-up reporting.
• Maintain and update the program Information Security Plan, cybersecurity policies, standard operating procedures, user guides, memoranda for record, and system interconnection agreements.
• Review and validate system access requests and support enforcement of approved access-control requirements.
• Evaluate systems and assets against applicable NIST, National Security Agency, Security Technical Implementation Guide, and approved desktop or platform security requirements.
• Monitor changes to cybersecurity regulations, policies, technical requirements, and threat conditions, and recommend corresponding updates to program controls and procedures.
• Produce accurate cybersecurity status reports, risk summaries, compliance metrics, inspection-readiness…