Our client is seeking Cybersecurity Subject Matter Expert (SME) to provide technical leadership supporting NIH's enterprise Information Security Program. This position serves as the senior cybersecurity advisor responsible for governance, risk management, security engineering, vulnerability management, Zero Trust, incident response, RMF, and enterprise security strategy across NIH's hybrid environment.
Responsibilities- Provide senior technical leadership for NIH's Information Security Program.
- Advise Government leadership on cybersecurity strategy, risk, and compliance.
- Lead implementation of NIST RMF and FISMA requirements.
- Support Assessment & Authorization (A&A), SSPs, POA&Ms, and security documentation.
- Guide Zero Trust Architecture initiatives and enterprise modernization efforts.
- Lead vulnerability management, penetration testing, and remediation strategies.
- Support enterprise Continuous Diagnostics & Mitigation (CDM) activities.
- Provide technical oversight for incident response, digital forensics, and threat mitigation.
- Evaluate enterprise security architecture supporting cloud, on-premises, and hybrid environments.
- Develop cybersecurity policies, standards, procedures, and best practices.
- Support audits, inspections, FISMA reporting, and compliance assessments.
- Mentor cybersecurity engineers, ISSOs, and technical teams.
- Bachelor's degree in Cybersecurity, Computer Science, Information Assurance, or related discipline (experience may substitute).
- 12+ years of progressive cybersecurity experience.
- Extensive knowledge of:
- NIST SP 800-53
- NIST RMF
- FISMA
- FedRAMP
- Zero Trust
- CDM
- Vulnerability Management
- Incident Response
- Security Architecture
- Enterprise Risk Management
- Experience supporting Federal cybersecurity programs.
- Experience briefing senior executives and technical stakeholders.
- Strong understanding of cloud security and hybrid enterprise environments.
- CISSP (strongly preferred)
- CGRC (formerly CAP)
- CISM
- CCSP
- Security+
- CEH
- GCIH
- PMP (preferred but not required)
- NIH or HHS cybersecurity experience.
- Microsoft Defender, Sentinel, Splunk, Tenable, ServiceNow, Azure Security Center.
- Security engineering and enterprise architecture.
- ISSO, ISSM, or CISO support experience.
Skills Required
- Bachelor's degree in Cybersecurity, Computer Science, Information Assurance, or related discipline (experience may substitute)
- 12+ years of progressive cybersecurity experience
- Knowledge of NIST SP 800-53
- Experience with NIST RMF
- Knowledge of FISMA requirements
- Knowledge of FedRAMP
- Experience with Zero Trust concepts and implementation
- Experience with Continuous Diagnostics & Mitigation (CDM)
- Vulnerability management and penetration testing experience
- Incident response and digital forensics experience
- Security architecture and enterprise risk management expertise
- Experience supporting Federal cybersecurity programs
- Experience briefing senior executives and technical stakeholders
- Strong understanding of cloud security and hybrid enterprise environments
- CISSP
- CGRC (formerly CAP)
- CISM
- CCSP
- Security+
- CEH
- GCIH
- PMP
- NIH or HHS cybersecurity experience
- Microsoft Defender
- Microsoft Sentinel
- Splunk
- Tenable
- ServiceNow
- Azure Security Center
- Security engineering and enterprise architecture experience
- ISSO, ISSM, or CISO support experience
What We Do
Elevate your business with Omniscius, where cutting-edge Business Intelligence meets exceptional Talent Acquisition. We specialize in empowering teams with custom training, offering strategic staffing solutions, and crafting unique talent acquisition strategies. Our focus on Federal Contracting and a robust partner ecosystem ensures your business stays ahead in government contracting and recruitment. Let us optimize your talent acquisition with our expertise and turn your challenges into opportunities. Discover the Omniscius advantage and transform your business landscape today
