Director of Information Assurance
$176,000–$282,000 year
On-siteReston, Virginia, United States
Job Summary
Lead and develop a distributed team of ISSMs and ISSOs across manager-led sub-teams, owning hiring, performance, career development, and workforce planning. Appoint staff to individual systems and hold the cadre accountable for accreditation, continuous monitoring, and audit quality. Provide enterprise oversight of the authorization lifecycle for classified networks, including new ATOs, continuous ATO, and re-authorization, while setting standards for RMF artifacts and risk assessment methodologies. Establish and maintain enterprise standards for media protection, endpoint hardening, configuration management, and vulnerability scanning, and direct the continuous monitoring program including audit log review and independent audits. Partner with Finance, Contracts, Compliance, and Program Management to convert IA roles from indirect to direct-charge and build metrics conveying IA scope and resourcing risk. Report to the Vice President, Chief Information Security Officer within the CISO organization.
Required Qualifications
- Bachelor's degree in Computer Science, Information Systems, Cybersecurity, Engineering, or a related field
- Master's degree
- 16+ years of total professional experience
- 10+ years of information security experience
- Experience leading IA and system security operations in classified environments (DoD collateral and/or SCI)
- Responsibility overseeing hiring, performance, and career development
- Managing geographically dispersed team experience
- Demonstrated track record overseeing teams that have obtained and maintained ATOs from DCSA, DoD, and/or IC Authorizing Officials
- Active TS clearance with the ability to obtain an SCI
- DoDM 8140.03 IAM Level III certification
- CISSP, CISM, GSLC, or equivalent certification
- Executive-level oral and written communication skills
- Ability to hold direct, accountable conversations across all organizational levels
Desired Qualifications
- Prior ISSO, ISSM, ISSE, or SCA experience in an IC environment
- Experience overseeing ISSMs of Record with DCSA, DIA, NSA, NRO, or CIA sponsors
- Experience authoring and defending accreditation packages in eMASS, Xacta, or equivalent tooling
- Experience partnering with Finance, Contracts, and Program Management to structure security roles as direct-billed program costs
- Prior experience running a corporate-overhead function with measurable efficiency and demand-justification discipline
- Familiarity with cross-domain solutions (CDS) and cross-domain accreditation
- Familiarity with Zero Trust reference architectures (DoD ZT Strategy, CISA ZTMM) in classified environments
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.