Assessment & Authorization Lead - Cyber Security Engineer (PID 891.c)

Job Title: Assessment & Authorization Lead - Cyber Security Engineer

Location: Remote

Support the Department of Veterans Affairs (VA) Electronic Health Record Modernization Integration Office (EHRM-IO) program as the Assessment & Authorization Lead.

•  Lead and manage a matrixed team to coordinate efforts across multiple organizations (DHA, DHMSM and VA).
• Interface with System Owners, System Stewards, Office of Information Security (OIS), Office of Information Technology, Product Owners, vendor project managers, and other stakeholders to manage JCOIC-driven tasks and responsibilities for systems that require cybersecurity review
• Provide Director and Executive-level reporting on all system packages submitted to JCOIC for review; and prepare ad-hoc briefings for leadership
• Enhance the A&A review process to streamline and automate manual steps
• Manage a technical team of cyber security professionals and provide mentorship and leadership
• Manage and resolve escalated issues and risks raised by the team
• Provide tactical leadership to personnel by delegating and monitoring technical and project-related tasks, provide constructive feedback to personnel, and work closely with team leads on personnel issues.
• Conduct technical reviews, validate modifications against the DISA CAL, work with and consult with ISSOs and system owners, and work across various departments and organizations (e.g., VA, DHA, DISA, etc.).
• Work collaboratively with Cybersecurity and IAM Oversight Technical Lead to manage the team and drive the Cyber Strategy for the Program

Minimum qualifications:

• 10+ years of professional work experience
• Extensive IT experience in all aspects of Cyber Security with a vast array of IT systems involving end user as well as enterprise level networks
• Extensive experience in the Risk Management Framework (RMF)
• Experience designing and implementing systems that meet agency Cyber Security policy and regulations (e.g., NIST, RMF, CSF, etc.)
• Extensive experience in Cyber Security tools, network topologies, intrusion detection, PKI, and secured networks
• Ability to analyze and synthesize VA and DoD policy, standards, guidelines and requirements and provide an accurate risk-based determination on any security-related issue or topic
• Ability to manage a staff of up to 25 including project managers and cybersecurity analysts
• Able to apply an in-depth practical understanding of IT and Information Security (IS) solutions and how they can be leveraged to protect the confidentiality, integrity, and availability of the federal enclave
• Able to decipher technical artifacts, conduct interviews of technical personnel, and produce technical artifacts used by decision makers
• Master’s Degree in Computer Science, Electronics Engineering or other engineering or technical discipline, or an additional 10 years of relevant experience may be substituted for degree requirements

Preferred qualifications:

• • Experience in the VA and/or DoD
  • Experience implementing Electronic Health Records
  • Experience in managing a joint cyber program with an engineering component
  • CISSP, CISM, GSLC, and/or CCISO certifications