Senior Cybersecurity Engineer - Compliance & Risk Management

Senior Cybersecurity Engineer - Compliance & Risk Management

The Human Resources Research Organization (HumRRO) is a non-profit leader in developing high-impact services and products in the arenas of employment, military, student testing, and professional credentialing and licensure. We work with federal and state government agencies, private sector organizations, and professional associations.

About the Organization

As a non-profit, HumRRO is dedicated to work that contributes to science and society. Our employees enjoy a highly collaborative and supportive environment that fosters innovation, ethical practice, and outstanding customer service. Our core operational staff includes Industrial-Organizational Psychologists, Educational Researchers, and Behavioral Science Consultants.

About the Job

We are seeking a Senior Cybersecurity Engineer to lead our enterprise compliance and security programs across federal, state, and private sector engagements. This role manages multiple compliance frameworks including CMMC, FedRAMP, SCRM, NIST 800-171 / 53, and ISO 27001 : 2022 regulatory requirements. You will work on compliance standards across hybrid cloud environments while leading a team of junior engineers conducting vulnerability assessments and security scanning operations. A significant portion of this role involves creating security documentation, developing compliance policies, responding to time-critical security requirements from clients, and managing third-party compliance audits.

As a Senior Cybersecurity Engineer, you will :

• Lead enterprise cybersecurity compliance programs (CMMC, FedRAMP, SCRM, NIST frameworks, ISO 27001 : 2022)
• Manage monthly compliance reporting and KPI dashboards for executive leadership
• Coordinate third-party compliance audits (NIST 800-171, CMMC, ISO 27001, FedRAMP) and remediation activities
• Maintain compliance evidence catalogs and SaaS compliance implementation controls
• Evaluate and implement security controls across software applications and cloud platforms AWS, Azure, and Office 365
• Oversee Risk Management Framework (RMF) processes for government contract organizations as well as applications in the DoD space (ATO / IATT / IATO documentation)
• Conduct weekly Plan of Action and Milestone (POA&M) reviews and monthly security assessments
• Develop and maintain security policies, procedures, and technical standards
• Lead vulnerability management programs & conduct security assessments and penetration testing coordination
• Manage business continuity of operations (COOP) program including disaster recovery and crisis management plans
• Lead incident response and security event investigation
• Mentor and manage junior cybersecurity engineers and analysts
• Interface with federal agencies, auditors, and compliance assessors
• Work with system architects for security requirements on existing cloud workloads, cloud migrations and / or hybrid environments
• Facilitate and oversee completion of all customers' cyber security questionnaires and qualifications with time-critical deadlines
• Coordinate with HumRRO Contracts Division on written responses to RFPs regarding IT security, controls, data privacy and regulatory compliance
• Assist with implementation and administration of cybersecurity supply chain risk management (C-SCRM) program
• Develop compliance documentation and security narratives for proposals
• Support business development with technical security expertise
• Serve as subject matter expert on internal security controls and regulations

Minimum Requirements :

Preferred :

The anticipated salary for this role is $100,000 to $155,000. Specific salary offers are based on candidate qualifications and experience.

Benefits :

All qualified applications will receive consideration without regard to race, color, religion, sex, national origin, age, marital status, sexual orientation, veteran status, medical condition, or disability. EEO / Vet / Disabled.

Named one of "50 Great Places to Work" by Washingtonian magazine and one of "Top Workplaces" by The Washington Post.