Security Lead

That’s RIVA.

We’re a mission-driven IT services company and systems integrator supporting digital transformation and modernization for federal government agencies. Since 2009, we’ve partnered with our customers to solve complex challenges through smart, practical innovation to deliver real outcomes where they matter most. Our teams are made up of industry-leading experts who are passionate about doing great work and making a difference. We don’t just develop solutions, we support efforts that strengthen communities and serve the public good.

RIVA’s culture is built on four core values:
Results, Innovation, Values, and Accountability. They guide how we work, how we collaborate, and how we measure success. Our employee-first approach is rooted in trust, ownership, and meaningful work. By investing in our people and fostering a flexible, supportive environment, employees have the opportunity to grow their skills, contribute ideas, and make an impact from day one. all while supporting missions that matter.

The Security Lead is the Government's focal point for the security posture of every contractor-provided FBIB system, tool, interface, and facility. This person obtains and maintains the Authority to Operate (ATO), runs continuous monitoring, and protects biometric data, PII, and Title 13 information across a nationwide network of sites, processing centers, and production facilities.

• Lead all security documentation, assessment, and authorization activities to obtain ATO for contractor systems. This includes the System Security Plan, FIPS 199 categorization, Privacy Impact Assessment, E-Authentication Risk Assessment, contingency plan, security control assessment support, and POA&M management.
• Ensure compliance with FISMA, the Census Bureau IT Security Program and Cyber Security Policy, and NIST SP 800-18, 800-34, 800-37, 800-47, 800-53, and 800-60, along with privacy and records management requirements.
• Support FedRAMP requirements at the Government-designated level (Moderate or higher) for any cloud components.
• Respond to all continuous monitoring alerts with initial assessment, updates, and resolution within required timelines, and report incidents and suspected breaches as directed.
• Run continuous monitoring, including annual self-assessment of a portion of controls, scheduled vulnerability scanning of infrastructure and endpoints at sites, application and database scanning, and authenticated scan access for the Census Bureau.
• Engage OIS security engineers from requirements through deployment so security is designed in rather than added before assessment.
• Define and enforce security controls for enrollment sites based on each facility's security level as determined by the Census Bureau Office of Security, and complete facility walkthroughs and site authorizations before sites open.
• Oversee physical security for contractor facilities, people, equipment, and data, including separation of systems handling PII and restricted access to areas where Census Bureau and selectee data are handled.
• Manage personnel security processing for contractor staff, including DOC background investigations, Title 13 oaths and Special Sworn Status, OF-306, e-QIP, and required training before staff touch Census data.
• Secure interconnections with Government systems through ISAs, encryption in transit and at rest, and access management.
• Manage supply chain risk assessments for hardware, software, and subcontractors.
• Own security risks in the program risk register, such as ATO delay, cyber incidents, and PII incidents.
• Oversee data sanitization and Title 13 media certification at decommissioning.

• Bachelor's degree in…