Senior Cyber Threat Planning

Job Title: Senior Cyber Threat Planning

Location: Fort Meade, MD 20755
Clearance Level: Active Secret Clearance
Job Type: Full-Time

• Bachelor's degree with major in IT, engineering, science, or mathematics

• Five + years of relevant/recent experience with audit methodologies and cybersecurity experience.
• Three + years of relevant/recent experience with Microsoft Office Products

• Current 8570/8140 requirement certification
• Certified Information Systems Auditor (CISA), Certified Information Systems Manager (CISM) or a Certified Information Systems Security Professional (CISSP) certification.

• Active Secret Clearance

The contractor shall coordinate, schedule, and manage all DISA supported audit activities, to include moderating meetings, requesting blackout dates, and facilitating all support requirements with audit stakeholders for approximately 150 audits annually. The contractor shall manage all RFI, audit interview participation, compelling evidence, and updates to and from audit stakeholders. Submit Control Objectives (CO) s and asset list (when available) to audit stakeholders for collaborative review and updates.

Provide onsite expertise for all DISA supported audits. Identify and maintain audit scope and ensure the audit activities remain within scope. Manage all follow up activities for post audit remediation and reporting. Manage and maintain the audit lessons learned to include planning, scheduling, and delivering final product. Use DISA approved tools to obtain, track, and validate asset vulnerability data. Collect compelling evidence and findings remediation artifacts and store in DISA's designated collaboration tool.

Maintain, update, and version control the Meeting Request List (MRL) and Document Request List (DRL) form via DISA's designated collaboration tool.

The contractor shall provide expertise with operational and financial cybersecurity readiness assessments. Provide expertise in regard to special projects, to include research on audit techniques. Collect and disseminate cybersecurity practices as related to audit activities. Provide comments and recommendations for incorporation in formal audit reports, audit programs and audit risk analysis. Facilitate self-assessments and report gaps and deficiencies on cybersecurity posture, to include the reliability and integrity of information systems, safeguarding of assets, compliance with policies and procedures, and effective and efficient use of resources.

• Meeting Minutes Report
• Communication plan
• Gap analysis
• MRL/ DRL responses/artifact requests
• Submit CO and asset list (when available) to audit stakeholders
• Also includes Deliverables that apply to all tasks listed in section 6, Performance Requirements