Jobs
>
Rockville

    Cybersecurity Compliance Lead - Rockville, United States - Axle

    Axle
    Axle Rockville, United States

    2 days ago

    Default job background
    Description

    Job Description

    Job Description

    Axle is a bioscience and information technology company that offers advancements in translational research, biomedical informatics, and data science applications to research centers and healthcare organizations nationally and abroad. With experts in biomedical science, software engineering, and program management, we focus on developing and applying research tools and techniques to empower decision-making and accelerate research discoveries. We work with some of the top research organizations and facilities in the country including multiple institutes at the National Institutes of Health (NIH).


    Axle is seeking a Cybersecurity Compliance Lead to join our vibrant team at the National Institutes of Health (NIH) supporting the National Center for Advancing Translational Sciences located in Rockville, MD.

    Benefits We Offer:

    • 100% Medical, Dental & Vision Coverage for Employees
    • Paid Time Off and Paid Holidays
    • 401K match up to 5%
    • Educational Benefits for Career Growth
    • Employee Referral Bonus
    • Flexible Spending Accounts:
      • Healthcare (FSA)
      • Parking Reimbursement Account (PRK)
      • Dependent Care Assistant Program (DCAP)
      • Transportation Reimbursement Account (TRN)

    Zero Trust is currently seeking a "Cybersecurity Compliance Lead" to join our team. The Cybersecurity Compliance Lead will support day-to-day and project-based security activities, POA&M remediations, vulnerabilities impact, and remediation process for the on-premises and cloud environments.

    The Cybersecurity Compliance Lead will use their expertise to effectively manage security compliance activities, security waivers, documentation by working and providing guidance to all the stakeholders.

    Primary Responsibilities:

    · Manage daily Cybersecurity compliance activities.

    · Lead and mentor the NCATS CSS Cybersecurity compliance team.

    · Lead NCATS Cybersecurity compliance efforts to follow the Risk Management Framework (RMF). Must be familiar with Risk Management Framework (RMF), NIST and other Government mandates.

    · Have a solid understanding of the ATO preparation and assessment process.

    · Schedule and coordinate compliance activities, sessions, and meetings with the stakeholders.

    · Provide security controls implementation guidance.

    · Be able to effectively work with stakeholders to manage and close POA&Ms.

    · Provide effective guidance to the stakeholders on secure baseline configurations.

    · Manage documentation in NIH GRC tool.

    · Ensure on time delivery of task order deliverables for cybersecurity compliance.

    · Manage work through tools such as NIH incident response (IRT) portal, Splunk, ServiceNow, Jira, Confluence etc.

    · Aid with the ATO preparations and security controls implementation.

    · Establish communications with vendors for the release of newly identified vulnerabilities and to ensure they understand the specialized requirements of the client's information systems.

    · Develop daily, weekly, and annual NCATS security landscape metrics.

    · Identify, analyze, and develop mitigation or remediation actions for system and network vulnerabilities.

    · Provide notification of potential threats by tracking vulnerabilities and exploits, propagation of worms and viruses.

    · Monitor the progress of internal and external organizations to ensure operational requirements are fulfilled for audits and reviews.

    Basic Qualifications:

    · Bachelor's degree in a relevant technical discipline and 4+ years of overall related experience. 5+ years of additional related years of experience is accepted in lieu of a degree.

    · Experience working with NIST 800-xxx series guidance.

    · Familiarity with different encryption types.

    · Familiarity with Windows/Unix/Linux platforms.

    · Familiarity with DevOps pipelines, code scanning, penetration testing etc.

    · Proven experience with incident and change management systems such as ServiceNow and Jira.

    · Well versed in Active Directory, Office 365, and other platforms.

    · Experience in Threat and Vulnerability scanning and remediation methodologies.

    · Familiarity with System Incident and Event Management (SIEM) and other logging and monitoring tools.

    · Experience in Vulnerability management and threat management tools such as Tenable Nessus, Netsparker, McAfee suite, Palo Alto, Amazon inspector and Cloud Watch etc.

    · Experience in a hybrid operations environment providing leadership specified reports based on information received from other system owners and operations team.

    Preferred Qualifications:

    · BS or MS degree in computer science, computer engineering, information systems, privacy engineering or related field of study.

    · CEH, Security Plus. Splunk Power User.

    · Excellent communication and presentation skills and the ability to effectively communicate designs, proposals, and results; and negotiate options at management levels

    · Proficient in developing briefing materials, administrative, and logistic support.

    Disclaimer:The above description is meant to illustrate the general nature of work and level of effort being performed by individuals assigned to this position or job description. This is not restricted as a complete list of all skills, responsibilities, duties, and/or assignments required. Individuals may be required to perform duties outside of their position, job description or responsibilities as needed.


    The diversity of Axle's employees is a tremendous asset. We are firmly committed to providing equal opportunity in all aspects of employment and will not tolerate any illegal discrimination or harassment based on age, race, gender, religion, national origin, disability, marital status, covered veteran status, sexual orientation, status with respect to public assistance, and other characteristics protected under state, federal, or local law and to deter those who aid, abet, or induce discrimination or coerce others to discriminate.


    Accessibility: If you need an accommodation as part of the employment process please contact:

    #IND

    #LI-ZG1

  • TEKsystems

    Security Compliance Lead

    3 weeks ago

    TEKsystems Rockville, United States

    100% Remote · Top 3 skills · NIST · Knowledge of the controls, walking through apps through them. · Who is self-motivated, working from home you must be responsible for your work. · Nice to have · Experience with criminal justice controls from the FBI is a huge nice to have ...

  • Axle Inc

    Cybersecurity Compliance Lead

    1 week ago

    Axle Inc Rockville, United States

    Job Description Job Description Axle is a bioscience and information technology company that offers advancements in translational research, biomedical informatics, and data science applications to research centers and healthcare organizations nationally and abroad. With experts i ...

  • Axle Informatics

    Cybersecurity Compliance Lead

    5 days ago

    Axle Informatics Rockville, United States

    Axle · is a bioscience and information technology company that offers advancements in translational research, biomedical informatics, and data science applications to research centers and healthcare organizations nationally and abroad. With experts in biomedical science, softwar ...

  • TEKsystems

    Security Compliance Lead

    2 weeks ago

    TEKsystems Rockville, United States

    TEKsystems · Security Compliance Lead · Rockville , · Maryland · Apply Now · As a Security Compliance Analyst, you will be joining a team performing security assessments and providing consulting support to assist clients in meeting FISMA and FedRAMP requirements. The ideal c ...

  • Gridiron IT

    Compliance Deputy Lead

    3 weeks ago

    Gridiron IT Arlington, United States

    Gridiron IT is seeking a Compliance Deputy Lead to support a federal program in Washington, DC. · Plan, coordinate, and lead team to provide information system security expertise to ensure the appropriate operational security posture is maintained for information systems. Respon ...

  • CAE USA

    Security Training and Compliance Lead

    2 weeks ago

    CAE USA Arlington, United States

    Summary · The candidate must be a detail-oriented, self-motivated individual responsible for the overall execution of the Security Education & Training (E&T) program related to Company and USG directives / requirements. The candidate will report to the Sr. Director of Security i ...

  • Mary's Center

    Compliance Lead

    2 weeks ago

    Mary's Center Washington, United States

    **_ Important Note: Mary's Center is mandating the COVID-19 vaccine + booster for all staff._** · **Position Summary*** · The Compliance Lead reports to and will work closely with the EVP of Compliance to support the activities and functions of the compliance program, bringing to ...

  • Gunnison Consulting Group Inc

    Lead Cybersecurity Compliance SME

    3 weeks ago

    Gunnison Consulting Group Inc Washington, United States

    Job Description · Job DescriptionWork Location: Hybrid/Washington, DC. · We are seeking a motivated and customer-oriented cybersecurity professional to support our Department of State client. The candidate will support maturation of the customer's cybersecurity program to enact c ...

  • Department Of Homeland Security

    Lead Contract Compliance Specialist

    3 weeks ago

    Department Of Homeland Security Cheltenham, United States

    Summary · "The Federal Law Enforcement Training Centers (FLETC), through strategic partnerships, prepares the federal law enforcement community to safeguard America's people, property, and institutions." We are a unique inter-agency organization preparing the next generation of l ...

  • CAE

    Security Training and Compliance Lead

    4 days ago

    CAE Arlington, United States

    Summary · The candidate must be a detail-oriented, self-motivated individual responsible for the overall execution of the Security Education & Training (E&T) program related to Company and USG directives / requirements. The candidate will report to the Sr. Director of Security i ...

  • Department Of Homeland Security

    Lead Contract Compliance Specialist

    3 weeks ago

    Department Of Homeland Security Cheltenham, United States

    Summary · "The Federal Law Enforcement Training Centers (FLETC), through strategic partnerships, prepares the federal law enforcement community to safeguard America's people, property, and institutions." We are a unique inter-agency organization preparing the next generation of l ...

  • Johns Hopkins Applied Physics Laboratory (APL)

    Trade Compliance Lead

    2 weeks ago

    Johns Hopkins Applied Physics Laboratory (APL) Laurel, United States

    Would you like to use your trade licensing and compliance expertise to help create the next defining innovation? · Do you like to work on novel legal issues that enable next-generation technological innovation? · If so, we're looking for someone like you to join our team at APL ...

  • The Johns Hopkins University Applied Physics Laboratory

    Trade Compliance Lead

    3 weeks ago

    The Johns Hopkins University Applied Physics Laboratory Laurel, United States

    · Would you like to use your trade licensing and compliance expertise to help create the next defining innovation? · Do you like to work on novel legal issues that enable next-generation technological innovation? · If so, we're looking for someone like you to join our team at AP ...

  • Johns Hopkins Applied Physics Laboratory (APL)

    Trade Compliance Lead

    2 weeks ago

    Johns Hopkins Applied Physics Laboratory (APL) Laurel, United States

    · Apply (by clicking the relevant button) after checking through all the related job information below. · Would you like to use your trade licensing and compliance expertise to help create the next defining innovation? · Do you like to work on novel legal issues that enable ne ...

  • Gridiron IT

    Compliance Deputy Lead

    3 weeks ago

    Gridiron IT Arlington, United States

    Gridiron IT is seeking a Compliance Deputy Lead to support a federal program in Washington, DC.Plan, coordinate, and lead team to provide information system security expertise to ensure the appropriate operational security posture is maintained for information systems. Responsibl ...

  • The Johns Hopkins University Applied Physics Laboratory

    Trade Compliance Lead

    3 weeks ago

    The Johns Hopkins University Applied Physics Laboratory Laurel, United States

    Would you like to use your trade licensing and compliance expertise to help create the next defining innovation? · Do you like to work on novel legal issues that enable next-generation technological innovation? · If so, we're looking for someone like you to join our team at APL ...

  • NovaWorks

    Project Engineer for Automation Technology PLT

    2 weeks ago

    NovaWorks Rockville, United States

    Your tasks: · Conducting EMSR & PLT planning projects for process and building technical systems and coordinating them in consultation with the project team and clients · The projects cover all planning phases as well as the implementation phase · Coordination of changes during t ...

  • Johns Hopkins Applied Physics Laboratory (APL)

    Trade Compliance Lead

    3 weeks ago

    Johns Hopkins Applied Physics Laboratory (APL) Laurel, MD, United States

    Description · Would you like to use your trade licensing and compliance expertise to help create the next defining innovation? · Do you like to work on novel legal issues that enable next-generation technological innovation? · If so, we're looking for someone like you to join ou ...

  • CEDENT

    Lead Cybersecurity Compliance

    2 weeks ago

    CEDENT Washington, United States

    Primary Job Responsibilities · **Qualifications**: · Technical Skills and Core Competencies Required · Preferred Certifications: CISSP, CISM, CRISC, CDPSE · Must have a basic background and understanding of SecDevOps, information technology, networking, virtual environments, and ...

  • Hewlett Packard

    Financial Controls and Compliance Lead

    6 days ago

    Hewlett Packard Spring, United States

    The Global Risk Organization provides a unique opportunity to get a broad view of HP businesses and processes in a relatively short period of time. The team is tasked with assessing how HP management is managing the inherent risk in our large, diverse and rapidly changing company ...