Cyber Risk Management Specialist

About Us:

VetCentric is focused on delivering outstanding services to the federal government. We have extensive experience in the fields of cybersecurity, supply chain & logistics management, strategy, business analytics, and IT services such as system design, continuous improvement, virtualization, and data center management. VetCentric is an SBA-certified HUBZone company and VA CVE certified Service-Disabled Veteran-Owned Small Business (SDVOSB). We operate in 15 states with offices in Washington DC and Northern Virginia.

Perks Working with Us:

• Competitive compensation
• Comprehensive health, vision, dental benefits
• 15 days leave and 10 days of paid Federal Holidays
• 401(k) with a matching plan
• Annual training budget
• Fantastic company culture

Location(s): Anywhere, US. Candidates from HUBZones (https://maps.certify.sba.gov/hubzone/map#center=39.828200,-98.579500&zoom=5) preferred.

Employment Eligibility: Eligible to work for any employer in the United States without requiring sponsorship. Sponsorship is not available currently.

Position Summary:

The Senior Cyber Risk Management Specialist has IT experience with Cyber Security Policy and threat mitigation. Must be well versed in Cyber Security Tools, network topologies, intrusion detection, PKI, and secured networks. Must have familiarity and experience in the implementation of cybersecurity regulations.

As a Senior Cyber Risk Management Specialist on our team, you will use your experience to work with the VA to discover their cyber risks, understand applicable policies, and develop a mitigation plan. You will review technical, environmental, and personnel details from SMEs to assess the entire threat landscape. Then, you will guide the client through a plan of action with presentations, white papers, and milestones. You will work with the client to translate security concepts, so they can make the best decisions to secure their critical infrastructure. This is your opportunity to act as an information security subject matter expert while broadening your skills in data science. Join us as we protect our nation's cyberinfrastructure.

Required Skills & Experience:

• Education: HS diploma or GED and 18+ years of experience with systems security engineering or BS degree in CS, IT, or Engineering and 10+ years of experience with systems security engineering.
• Years of experience: 10 years (with BS) or 18 years (with GED).

• Technical Skills:
• Experience with Cybersecurity, risk management, or risk assessment for complex systems.
• Experience with NIST SP 800 series publications and CNSS Instructions.
• Experience with risk analysis, data analytics, and visualizations.
• Understanding of elements of risk to include vulnerability, threat, likelihood, impact, mitigation, and remediation.
• Experience working with tight deadlines.
• Ability to engage directly with clients, and third parties to facilitate enterprise risk analysis.
• Experience with Governance, Risk, and Compliance (GRC) such as eMASS.

• Clearance: Ability to obtain a security clearance.

Desired Skills & Experience:

• Experience with tools such as Nessus, BigFix, Red Seal, RSA Archer, SCCM, Elastic, CDM.
• Experience with Assessment and Authorization (A&A).
• Experience with the MITRE ATT&CK framework.
• Experience with advanced Excel skills such as Power Query.
• Experience with NIST SP 800-53, 39, 37, 30.
• CompTIA Security+ or Certified Risk Management Professional (CRISC) or Certified in Risk and Information Systems Control (CRISC).
• Public Trust clearance.

“E-Verify Employer, EOE Females/Minorities/Protected Veterans/Individuals with Disabilities; VetCentric partners will offer equal employment opportunities to all persons without regard to race, color, religion, sexual orientation, gender, gender identity, age, national origin, physical or mental disability, veteran status, or other characteristic protected by applicable law.”