Cybersecurity Advisor

The Cybersecurity Advisor will implement and maintain the Network Services Information Assurance Program, helping ensure security controls operate as intended under applicable NIH and HHS guidance. The role supports risk management, incident response readiness, ATO-related activities, continuous monitoring, compliance reviews, and ongoing security documentation and reporting.

Key Responsibilities

• Implement and sustain the Network Services Information Assurance Program, ensuring security controls function correctly and align with the SSP and agency policies.
• Standardize security templates, processes, and policies in accordance with NIH and HHS guidance.
• Participate in NIH and CIT security working groups and coordinate activities with security teams and stakeholders.
• Lead development and maintenance of security documentation, including POA&Ms and waivers.
• Conduct annual risk assessments and security impact analyses, and support incident response activities.
• Oversee ATO-related activities for Network Services.
• Maintain technical security documentation, including SSPs, architecture diagrams, and data flows.
• Perform continuous monitoring, vulnerability assessment, and compliance reviews.
• Track remediation actions and maintain related waiver documentation.
• Conduct control assessments and coordinate requirements capture with Technical SMEs.
• Support system information security compliance, including review of accounts and deactivation of unused or departing employee accounts.
• Produce weekly, monthly, and quarterly status reports.
• Support agency audits for Network Services by providing required evidence.
• Review cybersecurity posture and operational dashboards, and communicate noteworthy risks or threats to program and customer executives.
• Oversee modernization and cloud-related security tasks.
• Establish standards and metrics for cybersecurity reporting and participate in governance committees.
• Conduct quarterly risk register reviews and support annual enterprise risk assessments and updates to governance materials.
• Oversee testing activities, including penetration tests.
• Manage and lead coordination meetings with security teams and stakeholders.

Required Qualifications

• BS degree in Computer Science, Information Systems, or equivalent experience (15+ years).
• Ability to obtain a Public Trust.
• Certifications: one or a combination of Security+, CAP, CISSP, CISA, or CEH.
• In-depth knowledge of Federal security policies, standards, guidelines, and NIST frameworks.
• Experience with requirements analysis, mitigation, and control implementation.

Preferred/Desired Skills

• Experience with FISMA, RMF, and the NIST SP 800 series.
• Hands-on vulnerability management experience.
• Project management experience.
• Ability to produce high-quality deliverables and manage deadlines.
• Strong analytical and communication skills.
• Ability to work independently and collaborate with diverse teams.

Security Clearance / Public Trust

• Public Trust: NACI (T1)

Additional Role Details

• Location: Bethesda, Maryland (Hybrid Workplace)
• Travel required: None
• Requisition type: Regular
• Requisition ID: RQ231936
• Years of experience: 10+ years of related experience (may vary based on technical training, certification(s), or degree)

Salary Information

The likely salary range for this position is USD 165,750 - 224,250 per year.

Key Skills for Success

• Contingency Planning
• FISMA Compliance
• NIST
• Vulnerability Management

Identity Verification Process

• You are expected to be on camera during virtual interviews.
• The employer reserves the right to take your picture to verify identity and prevent fraud.
• Proceeding authorizes the collection, processing, and use of biometric data for identity verification and security purposes.