Senior Information Systems Manager / Cybersecurity Assessment Manager
Washington D.C.RemoteFull-time
AI Summary
Senior Information Systems Manager leading and managing federal cybersecurity audits and assessments, overseeing findings and remediation guidance across government environments.
About this role
Who we are:
Makpar is a comprehensive professional and technical solutions provider for the Federal government. We combine functional and technical expertise in cloud engineering, data management, cybersecurity and emerging technologies to deliver mission success. We build the right IT solution for government clients by partnering with them to understand their WHAT, WHY, and HOW. Using our signature consulting methodology that we call “The Makpar Way,” we help agencies navigate the ongoing changes in the Federal technology landscape. We succeed where others fail because of our connected and engaged workforce are dedicated to delivering success for our clients and the American people.
Our Mission: We solve complex problems for the Federal government to accelerate access to citizen services.
When it comes to excellence, we deliver. Learn more about our employer brand at makpar.com/careers.
The Senior Information Systems Manager will lead and manage federal cybersecurity audits and assessments. This person should understand security controls, configuration changes, vulnerability management, software and hardware updates, and the practical execution of cybersecurity reviews across complex government environments.
Key Responsibilities
• Lead or oversee cybersecurity audits and assessments for federal, state, and local partner agency environments.
• Manage assessment personnel and coordinate technical review execution.
• Support system configuration checks, interviews with system users and administrators, and review of security artifacts.
• Oversee findings development, remediation guidance, vulnerability management, and control implementation analysis.
• Support computer security review deliverables, including scope memos, SCSEMs, Nessus results, PFRs, SRR Section H packages, CAP/POA&M materials, and AARs.
• Coordinate technical issue resolution across Government stakeholders, partner agencies, and contractor teams.
• Support methodology improvements and updates where assessment findings indicate process or technical gaps.
• Manage assessment personnel and coordinate technical review execution.
• Support system configuration checks, interviews with system users and administrators, and review of security artifacts.
• Oversee findings development, remediation guidance, vulnerability management, and control implementation analysis.
• Support computer security review deliverables, including scope memos, SCSEMs, Nessus results, PFRs, SRR Section H packages, CAP/POA&M materials, and AARs.
• Coordinate technical issue resolution across Government stakeholders, partner agencies, and contractor teams.
• Support methodology improvements and updates where assessment findings indicate process or technical gaps.
Required Qualifications
• High school diploma or higher.
• Demonstrated experience with federal government cybersecurity audits and assessments.
• Demonstrated experience implementing security controls, configuration changes, software/hardware updates, and vulnerability management.
• Demonstrated experience in IT/cybersecurity project and personnel management.
• At least one of the required PWS-listed certifications, including CASP+ CE, CCNP Security, CISA, CISSP or Associate, GCED, GCIH, CCSP, CISM, GSLC, CCISO, HCISPP, CEH, CySA+, GSNA, CFR, or PenTest+. A minimum two-year IT/cybersecurity program may substitute for certification.
• Ability to complete IRS suitability / staff-like access requirements.
• Ability to provide resume and Letter of Commitment.
Preferred Qualifications
• Prior IRS, Treasury, FTI, Publication 1075, or Safeguards experience.
• Experience with NIST 800-53, NIST RMF, FISMA, CIS Benchmarks, DISA STIGs, Nessus, SCAP, and POA&M validation.
• Experience leading review teams across Windows, Linux, UNIX, cloud, mainframe, database, network, firewall, virtualization, and container environments.
• Strong technical writing for federal findings and remediation guidance.
• Demonstrated experience with federal government cybersecurity audits and assessments.
• Demonstrated experience implementing security controls, configuration changes, software/hardware updates, and vulnerability management.
• Demonstrated experience in IT/cybersecurity project and personnel management.
• At least one of the required PWS-listed certifications, including CASP+ CE, CCNP Security, CISA, CISSP or Associate, GCED, GCIH, CCSP, CISM, GSLC, CCISO, HCISPP, CEH, CySA+, GSNA, CFR, or PenTest+. A minimum two-year IT/cybersecurity program may substitute for certification.
• Ability to complete IRS suitability / staff-like access requirements.
• Ability to provide resume and Letter of Commitment.
Preferred Qualifications
• Prior IRS, Treasury, FTI, Publication 1075, or Safeguards experience.
• Experience with NIST 800-53, NIST RMF, FISMA, CIS Benchmarks, DISA STIGs, Nessus, SCAP, and POA&M validation.
• Experience leading review teams across Windows, Linux, UNIX, cloud, mainframe, database, network, firewall, virtualization, and container environments.
• Strong technical writing for federal findings and remediation guidance.
Skills
CASP+ CECCISOCCNP SecurityCCSPCEHCFRCISACIS BenchmarksCISMCISSPConfiguration ManagementCySA+DISA STIGsFISMAGCEDGCIHGSLCGSNAHCISPPIT/cybersecurity Project ManagementNIST 800-53NIST RMFPentestPOA&M ValidationSCAPSecurity AssessmentsSecurity Controls ImplementationSystem PatchingTechnical WritingVulnerability Management
