Join Our Team as a Cybersecurity Control Evaluator!
SkyePoint Decisions, Inc. is actively seeking a skilled and passionate Cybersecurity Control Evaluator to strengthen our team. In this vital role, you will provide essential support to the Department of Education's (DoED) Federal Student Aid (FSA) Cybersecurity and Privacy Support Services (CPSS). This is a remote position, allowing you the flexibility to make a significant impact from anywhere.
Key Responsibilities :
- Act as a subject matter expert in the Security Assessment and Authorization (SA) program.
- Deliver accurate guidance and technical expertise regarding standards, policies, and procedures.
- Review and enhance the OSA program and continuous monitoring capabilities, including Privacy Impact Assessments (PIAs) and System Security Plans (SSPs).
- Evaluate third-party applications and systems to provide informed recommendations.
- Thoroughly assess system artifacts to support authorization to operate (ATO) requests.
- Review ATO packages under the Risk Management Framework (RMF) for FSA systems, ensuring high quality before submission.
- Ensure the accurate uploading of assessment and audit reports to the ED FISMA Management Tool (CSAM).
- Coordinate data collection efforts to support audit and compliance reporting.
- Conduct audits of Plan of Actions and Milestones (POA&M), ensuring completeness and compliance.
- Support ongoing security authorizations and continuous monitoring processes.
- Contribute to document development for CISO-sponsored events, providing feedback and reviews.
- Monitor and track security authorization renewal dates, collaborating with stakeholders for compliance.
- Lead lessons learned sessions and develop best practices.
Qualifications :
Ability to obtain a DoED Level 6 High Risk / Public Trust Security Clearance.Bachelor's degree or equivalent with 5-10 years of relevant experience.A minimum of 3 years of experience in a computer security incident response role.Experience with enterprise Linux and Windows administration for at least 3 years.Background in a Security Operations Center is highly desirable.Familiarity with Active Directory and enterprise credential stores.A strong passion for information security and incident response.Knowledge of cyber threat intelligence.Exceptional communication and interpersonal skills.Strong critical thinking and problem-solving abilities.Ability to quickly learn new technologies and adapt to changing environments.Capacity to work independently and collaboratively within a cross-functional team.Skills in identifying tactical and strategic solutions to complex challenges.Advanced malware analysis experience, including reverse engineering.Must be a U.S. citizen.Preferred Qualifications :
Active Top Secret security clearance is an advantage.What We Offer :
A culture of gratitude where we appreciate our employees and create a positive community impact.Comprehensive benefits, including diverse insurance options, Flexible Spending Accounts (FSAs), full dental plans, and matched 401k.A Certificate Incentive Program that rewards professional development and certification achievements.A flexible work environment that supports the balance between professional and personal commitments.Compensation :
The salary range for this position is TBD, influenced by various factors such as location, experience, and specific contract needs.
SkyePoint Decisions is committed to excellence, holding ISO 9001 : 2015 and ISO / IEC 27001 : 2013 certifications, and fostering a collaborative and supportive team culture. We value the contributions of our employees and strive to create a flexible working environment that encourages success both personally and professionally.
SkyePoint Decisions is proud to be an Equal Opportunity Employer and a participant in E-Verify. We invite you to join us and make a difference!