IT Security & Compliance Lead

• Key Responsibilities:

  • Strong understanding of security program and control frameworks, assessment methodologies, and practices, e.g., NIST 800-171, CMMC, NIST RMF, NIST CSF, ISO 27001/2, and FedRAMP
  • Strong understanding of data controls and compliance regimens involving CUI, export control, and data privacy
  • Experience with cybersecurity programs in the Defense and/or Federal/Civilian
  • Experience with the conduct of security assessments
  • Ability to communicate technical security concepts to non-technical audiences
  • Experience leading compliance programs
  • Effective program management, project management, and organization management skills
  • Certification such as Certified Information Systems Security Professional (CISSP) or the Certified Information Systems Auditor (CISA) preferred.

  Required Experience:

  • 7+ years of experience in an IT security or compliance role
  • 3+ years of experience working directly with CMMC and/or DFARS -7012 compliance
  • 2+ years writing polices, requirements, or similar documents
  • Bachelor's degree or 4+ years of experience in a relevant field

  Required Skills:

  • Strong understanding of security program and control frameworks, assessment methodologies, and practices, e.g., NIST 800-171, CMMC, NIST RMF, NIST CSF, ISO 27001/2, and FedRAMP
  • Strong understanding of data controls and compliance regimens involving CUI, export control, and data privacy
  • Experience with cybersecurity programs in the Defense and/or Federal/Civilian
  • Experience with the conduct of security assessments

Education, Experience and Certification

Required/Preferred

Education Level

Description

Required

Bachelors Degree

computer science, information technology, or related field

Required/Preferred

Years of Experience

Description

Required

5 years

Experience in an IT security or compliance role

Experience with cybersecurity programs in the Defense and/or Federal/Civilian

Experience leading compliance programs

Required/Preferred

License/Certification

Description

Preferred

Certification

CISA

Knowledge, Skills, and Abilities

• Advanced understanding of security program and control frameworks, assessment methodologies, and practices e.g. NIST RMF, NIST CSF, ISO-27001, 800-53, 800-171, CMMC, CNSSI 1253, 800-137, PCI-DSS, GDPR, HITRUST, etc.
• Advanced understanding of data controls and compliance regimens including CUI, ITAR/ EAR, PCI, PII, etc.
• Ability to communicate technical security concepts to non-technical audiences
• Effective program management, project management, and organization management skills
• Certification such as Certified Information Systems Security Professional (CISSP) or the Certified Information Systems Auditor (CISA) preferred.

Travel Requirements

• What percentage of their role do they have to leave their base location? Base location is a specific office or home location. Up to 10%.

Disclaimer

This job description is subject to change by the employer as the needs of the employer and requirements of the job change.

We maintain a drug-free workplace and perform pre-employment substance abuse testing.

J&J Worldwide Services CBRE Government and Defense Business is thrilled at the opportunity for you to apply to one of our roles. This position may also be eligible for a wide range of competitive benefits that can include but not limited to: medical, well-being, financial planning and short-term incentives benefits.