Cybersecurity Compliance Manager na MBL Technologies Inc
MBL Technologies Inc · Washington, Estados Unidos Da América · Hybrid
- Senior
- Escritório em Washington
Description
MBL Technologies, Inc. offers a diverse set of management and technology consulting services to Federal government and commercial markets. Our solutions are tailored to support each client’s mission, accounting for their unique needs and operating environments to ensure success. We bring the right people, capabilities, and expertise together to assist our clients with enabling their mission. Together our individual differences drive successful business results.
If you are transitioning from military to civilian life, have prior service, are a retired veteran, or a member of the National Guard or Reserves, or spouse of an active military service member, we encourage you to apply. Please visit our webpage for information on our policies and benefits for the military and veteran community.
Why Work with Us?
- We trust, empower, and believe in our employees to soar to their fullest potential!
- We offer a robust benefits package (medical, dental, vision, STD, Accident, Life, Hospital Insurance, FSA, HSA, 401K match, professional development stipend, etc.).
- We love to have fun and give back to the community. Community Service and Employee Engagement events are atop our calendar events!
- We genuinely like each other and champion everyone to achieve their own greatness!
MBL Technologies is seeking a skilled Cybersecurity Compliance Manager to support a federal contract. This role is mostly remote; however, it will require occasional onsite meetings in the Arlington area. With no travel reimbursements allocated. This role is contingent based on contract award.
The Cybersecurity Compliance Manager supports and oversees security compliance, governance, and incident response functions to ensure the confidentiality, integrity, and availability of agency information. This role leads the execution of security impact assessments, monitors compliance activities, and develops strategies, policies, and training to strengthen the organization’s overall cybersecurity posture.
Key Responsibilities:
- Conduct periodic security impact assessments and ongoing security compliance monitoring activities.
- Review system-related security plans to ensure alignment with privacy, IT, and compliance standards.
- Administer processes for tracking, investigating, and responding to security-related complaints.
- Collaborate with cybersecurity teams on risk assessments, compliance reviews, and remediation strategies.
- Prepare audit reports highlighting findings and recommended corrective actions.
- Ensure proper reporting and documentation of self-disclosures of security or privacy violations.
- Oversee the design and delivery of initial and ongoing security training and awareness activities.
- Monitor system development and operations for compliance with security and privacy controls.
- Ensure appropriate handling of Personally Identifiable Information (PII) and other protected data in compliance with FDIC and legal requirements.
- Maintain knowledge of federal and state security laws, regulations, and accreditation standards.
- Promote cybersecurity awareness and ensure integration of security principles into organizational strategy, vision, and goals.
- Coordinate with business units, compliance officers, and IT staff to ensure alignment with policies and secure technology adoption.
Required Experience & Skills:
- Minimum 7+ years of relevant cybersecurity compliance experience.
- Advanced degree in cybersecurity, information systems, or a related field (or equivalent experience/certifications).
- Expertise in conducting vulnerability scans and evaluating security designs.
- Strong ability to develop policies reflecting business security objectives.
- Proficiency in assessing vendor agreements and third-party security practices.
- Strong technical writing and documentation skills.
- Ability to clearly communicate complex cybersecurity issues to both technical and non-technical stakeholders.
- Skilled in applying cybersecurity and privacy controls and identifying risks stemming from external/internal connections.
Required Abilities:
- Ability to develop and maintain SOPs, policies, and training curricula.
- Strong communication skills for preparing briefings, reports, and instructional materials.
- Ability to evaluate information reliability, relevance, and compliance risks.
- Proven ability to tailor complex technical information to diverse audiences.
- Ability to function in a collaborative environment, leveraging internal and external expertise.
Required Knowledge:
- Security Impact Assessment methodologies and risk management processes.
- Cybersecurity threats, vulnerabilities, and privacy principles.
- Relevant laws, regulations, and compliance requirements (e.g., FISMA, PCI DSS, PII standards).
- Cybersecurity disclosure standards and federal reporting obligations.
- Network security concepts, protocols, architectures, and encryption methods.
- Cyber-attack stages and defense-in-depth security principles.
- Organizational business processes and operational impacts of cybersecurity lapses.
Preferred Certifications:
- ISC2 CISSP, CAP, or ISSMP
- ISACA CISM, CGEIT, or CISA
- GIAC (GSEC, GPEN, GMON, GSLC, GISP)
- CompTIA CASP+
- Certified FISMA Compliance Practitioner (CFCP)
- ITIL v3 Foundations
- Federal Acquisition Certification – Program and Project Management (FAC-P/PM)
MILITARY OCCUPATIONAL SPECIALTY CODES (MOS codes):
170A, 170D, 17A, 17B, 17C, 17D, 24B, 25B, 47D, 94F, IT, 17 5309, 6203, 9735, 9740, 9890, 9891
CORPORATE CITIZEN:
MBL Technologies’ vision is to make a positive difference – for our people, our customers, and our communities. As such, a commitment to service and excellence has been woven into the very fabric of our culture. MBL employees demonstrate a willingness to consistently go above and beyond and strive for excellence in all we do – championing, protecting, and celebrating the core business through the mission, vision, and values. All are expected to be good corporate citizens, supporting one another and internal corporate initiatives to build a stable business platform and ensure lasting company success.
Benefits:
MBL Technologies offers a competitive salary adjusted for candidate qualifications partnered with an industry-leading benefits package. This package includes incentive plans with corporate and individual-based performance bonuses, 401K, PTO, remote work, health and wellness programs, employee discounts, and learning and development reimbursement.
EEO STATEMENT:
MBL Technologies is an Equal Opportunity Employer. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability, or protected veteran status.
Candidatar-se agora