Security Policy and Compliance Manager

Overview

Position Title : Security Policy and Compliance Manager

Location : On Site - Washington, D.C.

Clearance Required : Public Trust

Cybervance is a rapidly growing information security and information technology company in Washington, D.C., and we are an equal opportunity employer that designs, develops, and manages the successful execution of training programs for government and private sector organizations. Cybervance believes in creating innovative solutions to deliver measured results.

Cybervance is seeking a highly skilled Security Policy and Compliance Lead to support our federal customer in ensuring security standards, policies, and regulatory requirements are met across enterprise systems.

The Security Policy and Compliance Lead will be responsible for developing, maintaining, and overseeing security documentation, implementing and assessing security controls, and leading risk management efforts in alignment with NIST and federal standards. The ideal candidate will bring hands-on expertise in security authorization and assessment (A&A), continuous monitoring, and policy oversight, coupled with strong leadership skills and the ability to communicate effectively with both technical and executive stakeholders.

Responsibilities

• Develop, maintain, and manage security documentation required for the Authorization and Accreditation (A&A) package, including System Security Plans (SSPs), Contingency Plans (CPs), and Security Assessment Reports (SARs).
• Provide oversight and development of Plans of Action and Milestones (POA&Ms) and ensure timely remediation of identified risks.
• Lead and perform all continuous monitoring activities, ensuring security controls remain effective and compliant with federal regulations.
• Conduct and document risk assessments based on NIST standards, ensuring that system design and implementation sufficiently mitigate Information Assurance (IA) risks.
• Implement, assess, and validate NIST SP 800-53A security controls for federal agencies, ensuring systems achieve and maintain compliance.
• Apply advanced risk management techniques to identify vulnerabilities and provide recommendations for mitigation strategies.
• Collaborate with technical teams to integrate security into system development life cycles and operational processes. Utilize data analysis, data mining, and business intelligence techniques to correlate data from disparate sources, identify trends, and create informative risk / compliance dashboards and visualizations.
• Provide guidance on security policy, compliance requirements, and audit readiness to technical and business stakeholders.
• Stay current with evolving federal security requirements, emerging technologies, and industry best practices to maintain a compliance posture.

Required Skills and Experience

Education and Certifications

#J-18808-Ljbffr