16 jobs found

Job description: Chief Information Officer This is not a Remote/Work From Home opportunity. Principal Responsibilities: Leadership Characteristics The successful candidate will be a practical technology executive who understands community banking and can operate effectively in a lean environment. This individual must be comfortable advising senior management and the Board while remaining close to the Banks systems, vendors, employees and day-to-day technology needs. The CIO should demonstrate sound judgment, strong communication skills, financial discipline and the ability to manage several priorities at once. The position requires someone who can challenge existing practices when necessary, explain technical issues clearly and work effectively across the organization. The successful candidate must also be an effective executor. This individual should establish clear priorities, create accountability, raise issues early and follow important initiatives through to completion. Strategic & Executive Leadership Develop and maintain a technology plan that supports the Banks strategic goals, growth plans, risk appetite and operating priorities. Serve as the primary technology advisor to executive management and the Board of Directors. Translate the Banks strategic priorities into defined technology, data and process-improvement initiatives. Recommend technology priorities and investments based on business need, risk, expected return and total cost. Work with department leaders to identify opportunities to improve service, efficiency, scalability and accountability through technology. Keep executive management and the Board informed about major technology projects, cybersecurity risks, system issues, vendor performance and industry developments. Evaluate new technologies and determine whether they are practical and appropriate for the Bank. Help establish a disciplined approach to prioritizing technology requests across the organization. Execution & Operating Performance Maintain an enterprise technology project portfolio with clear priorities, business owners, milestones, budgets and expected outcomes. Establish regular reporting on project progress, implementation risks, costs, delays and results. Hold internal teams, project leaders and outside providers accountable for agreed-upon commitments. Identify and address barriers that prevent technology initiatives from being completed on time or producing the intended results. Work with business leaders to improve the use of existing systems before recommending additional technology investments. Simplify processes, reduce unnecessary manual work and improve coordination between departments. Establish meaningful service levels and performance measures for technology operations, projects and critical vendors. Conduct post-implementation reviews to determine whether major projects achieved their operational, financial and risk-management objectives. Provide executive management with clear information regarding competing priorities, resource limitations and execution risks. Promote greater discipline in project planning, decision-making, documentation and follow-through. Technology Operations & Core Systems Oversee the Banks technology infrastructure, networks, telecommunications, hardware, software and business applications. Ensure that systems supporting branches, lending, deposits, payments, financial reporting and customer-facing channels are reliable and properly supported. Oversee the Banks core processing system and other critical applications. Lead major technology projects, including system implementations, integrations, conversions, migrations and upgrades. Work with business units to improve the use of existing systems and eliminate unnecessary duplication. Establish clear processes for system access, change management, technical support, incident management and issue resolution. Maintain appropriate documentation for systems, applications, procedures and technology decisions. Balance internal technology resources with the use of managed-service providers and outside specialists. Maintain an appropriate technology architecture that supports the Banks current operations and anticipated growth. Cybersecurity, Risk & Regulatory Compliance Provide leadership for the Banks cybersecurity and information-security programs. Work closely with the Information Security Officer and other risk leaders to maintain effective controls. Oversee access management, network security, data protection, vulnerability management, security monitoring and incident response. Ensure technology policies and practices comply with applicable laws, regulations and regulatory guidance, including FFIEC and GLBA requirements. Coordinate technology-related regulatory examinations, internal audits, external audits and independent assessments. Ensure audit, examination and assessment findings are addressed in a timely and effective manner. Communicate significant technology and cybersecurity risks to executive management and the Board. Promote cybersecurity awareness throughout the Bank. Participate in enterprise risk-management activities and provide informed assessments of technology, cybersecurity and third-party risks. Public-Company Controls & Disclosure Support Partner with Finance, Risk, Internal Audit and external auditors to maintain effective technology controls supporting financial reporting and public-company requirements. Maintain appropriate controls over system access, system changes, data integrity and technology used in financial reporting. Support the Banks compliance with applicable internal-control and Sarbanes-Oxley requirements. Ensure technology-control documentation is complete, current and available for review by management, auditors and regulators. Identify technology-control weaknesses and oversee timely remediation. Work with Finance to maintain the reliability of system-generated reports and information used in financial reporting. Coordinate with Legal, Finance, Risk and executive management when technology or cybersecurity matters may require regulatory or public disclosure. Escalate significant cybersecurity incidents promptly and provide accurate information to support materiality assessments and disclosure decisions. Support the preparation of required cybersecurity risk-management, governance and incident disclosures. Provide technology and cybersecurity information to the Board, Audit Committee or other Board committees as requested. Vendors, Projects & Business Continuity Manage relationships with the Banks core processor, software providers, managed-service providers and other critical technology vendors. Lead technology vendor selection, due diligence, contract review and performance monitoring. Evaluate vendors based on service quality, financial condition, cybersecurity controls, business-continuity capabilities and regulatory requirements. Hold vendors accountable for service levels, security requirements, project commitments and timely issue resolution. Develop and manage the Banks technology operating and capital budgets. Evaluate technology spending based on business value, risk reduction, expected benefits and total cost. Oversee technology disaster-recovery planning and testing. Ensure critical systems, applications and data can be recovered within established timeframes. Participate in the Banks broader business continuity, crisis-management and incident-response planning. Ensure technology projects are properly scoped, prioritized, resourced and completed within established budgets and timelines. Data & Reporting Support the Banks data, reporting and business-intelligence needs. Work with business leaders to improve the quality, consistency and availability of information used by management and the Board. Help establish clear ownership and accountability for critical data. Improve the reliability and usefulness of management reporting. Ensure appropriate controls are in place to protect sensitive and confidential information. Evaluate opportunities to use automation, artificial intelligence and other emerging technologies in a controlled and practical manner. Establish appropriate governance for the use of artificial intelligence and other emerging technology. Help the Bank make better use of technology and data to support customer service, risk management, financial performance and decision-making. Team Leadership Lead, develop and retain the Banks technology staff. Establish clear responsibilities, performance expectations and service standards. Promote accountability, responsiveness, collaboration and strong internal customer service. Provide appropriate training, cross-training and succession planning. Build effective working relationships throughout the Bank. Ensure the technology team understands the Banks business priorities and the importance of timely execution. Create an environment in which issues are raised early, responsibilities are clear and commitments are met. Qualifications: Chief Information Officer This is not a Remote/Work From Home opportunity. Education and Experience Bachelors degree in information technology . click apply for full job details

The Hollister Group seeks a Vice President and Chief Information Officer to lead technology strategy for a growing professional, scientific, and technical services firm. This executive will own the IT vision, driving secure, scalable systems that power recruiting, consulting, and internal operations. Responsibilities include defining the technology roadmap, overseeing applications, infrastructure, and cybersecurity, and aligning digital initiatives with business goals. The CIO will mentor a high-performing team, optimize vendor partnerships, manage budgets, and champion innovation in a collaborative, values-driven culture. Responsibilities Provide strategic leadership for all technology, data, and information systems across the firm Develop and execute an IT roadmap aligned with business, recruiting, and consulting priorities Oversee enterprise applications, infrastructure, cybersecurity, and data governance Partner with executive leadership to drive digital transformation and operational efficiency Evaluate, select, and manage technology vendors and key platforms Establish IT policies, standards, and risk management practices to ensure compliance Lead, mentor, and develop a high-performing IT and security team Define and track KPIs to measure system performance and business impact Ensure reliable, secure systems that support internal teams and client-facing solutions Manage IT budgets, forecasting, and capital planning Required Skills IT strategy Enterprise architecture Cybersecurity management Cloud platforms (AWS/Azure) Data governance and analytics ERP/HRIS/CRM systems Vendor and contract management IT risk and compliance Budgeting and financial management People and organizational leadership

Job Summary The SVP, Global Chief Information Security Officer (CISO) & IT Governance is responsible for leading the organization's global cybersecurity strategy, governance model, risk management program, and cyber resilience capabilities. This executive provides strategic oversight of security operations, architecture, governance, compliance, regulatory readiness, audit coordination, incident response, and recovery. The role ensures cybersecurity is embedded into enterprise strategy, technology transformation, digital innovation, third-party relationships, and day-to-day operations, while serving as a trusted advisor to senior leadership, Board-level stakeholders, Legal, Compliance, Privacy, Internal Audit, regulators, auditors, customers, and external partners. Job Description Key Responsibilities Set and execute the enterprise cybersecurity strategy and multi-year roadmap aligned with business priorities, risk appetite, regulatory expectations, technology transformation, and enterprise growth. Analyze emerging cybersecurity and governance threats (including AI) and create remediation recommendations. Establish and mature the cyber governance model, including policies, standards, decision rights, executive reporting, escalation protocols, and accountability mechanisms. Lead global security operations, including threat monitoring, intelligence, incident detection, vulnerability management, identity and access management, endpoint security, cloud security, encryption, data protection, analytics, response, and recovery. Oversee security architecture and control design to embed security into technology platforms, cloud environments, data ecosystems, business applications, digital products, privileged access management, and Zero Trust initiatives. Lead Governance, Risk & Compliance (GRC) programs, including risk identification, assessment, prioritization, mitigation, acceptance, monitoring, reporting, policy governance, and compliance oversight. Integrate cybersecurity risk management into enterprise risk management, business planning, technology governance, third-party oversight, customer assurance, and major transformation initiatives. Oversee readiness for applicable laws, regulations, contractual obligations, supervisory expectations, industry standards, and frameworks such as NIST, ISO 27001, CIS Controls, GDPR, HIPAA, PCI DSS, HITRUST, SOX / ITGC, or other relevant requirements. Serve as the primary technology liaison to Legal, Compliance, Privacy, and Internal Audit on cybersecurity, regulatory, privacy, audit, contractual, and customer assurance matters. Lead cyber resilience planning, including incident response strategy, crisis escalation, executive communications, tabletop exercises, ransomware preparedness, recovery coordination, recovery validation, and lessons-learned governance. Advise executive leadership and Board-level stakeholders on cyber risk exposure, emerging threats, program maturity, investment priorities, strategic trade-offs, incident readiness, and regulatory disclosure considerations. Build, lead, and develop a high-performing global cybersecurity and IT governance organization with clear accountability, succession planning, talent development, operating rhythms, and measurable maturity improvements. Champion an enterprise culture in which cybersecurity is understood as a shared leadership responsibility and embedded into business decision-making. Scope of Accountability Global Cybersecurity Program Security Operations, Threat Intelligence & Incident Response Security Architecture & Engineering Identity & Access Management Governance Privileged Access Management Governance Governance, Risk & Compliance (GRC) HITRUST Certification Program PCI Compliance Program SOX / IT General Controls (ITGC) Technology Change Management Governance Cyber Resilience & Recovery Readiness Third-Party Security Assurance Legal, Compliance & Privacy Technology Coordination Executive, Audit Committee, and Board Cybersecurity Reporting Cybersecurity Strategy, Governance, Maturity Roadmap, Investment Prioritization & Enterprise Risk Reporting AI Security Risk Analysis / Threat Mitigation AI Risk Governance Leadership Expectations Operate as a strategic business executive balancing cybersecurity risk, compliance, privacy, technology governance, resilience, and operational priorities. Translate complex cyber, technology, and operational risks into business impact, financial exposure, regulatory implications, and strategic choices. Lead through ambiguity, manage high-pressure incidents, and communicate clearly with senior stakeholders during crisis situations. Influence without direct authority, drive cross-functional alignment, and enable pragmatic, risk-informed decisions. Promote a culture of accountability, resilience, cybersecurity awareness, and continuous improvement. Enable business growth through security leadership that supports innovation, operational resilience, and regulatory readiness. Maintain a mature global security and governance program that supports evolving business, technology, regulatory, customer, and audit requirements. Our benefit package includes health insurance, life and disability, 401(k) contributions, paid time off, etc., for employees working 30 or more hours per week on average. For a more comprehensive list of our benefits please click here. For roles where employees work less than 30 hours per week, benefits include 401(k) contributions as well as access to the Employee Assistance Program, Employee Resource Groups and the Employee Service Corp. We're dedicated to creating a Medline where everyone feels they belong and can grow their career. We strive to do this by seeking diversity in all forms, acting inclusively, and ensuring that people have tools and resources to perform at their best. Explore our Belonging page here. Medline Industries, LP is an equal opportunity employer. Medline evaluates qualified individuals without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, age, disability, neurodivergence, protected veteran status, marital or family status, caregiver responsibilities, genetic information, or any other characteristic protected by applicable federal, state, or local laws.

Company Overview: Over the past 15 years, eTel has delivered essential solutions for the federal government by securing and managing data, providing scalable identity access, modernizing legacy systems, and building high-performance platforms. By integrating new technologies and ensuring reliable operations we help agencies stay prepared for future challenges As a premier technology solutions and services company to the US federal government, eTel possesses longstanding relationships across the federal civilian marketplace. Other customers include the broader Treasury Department, Commerce Department, and State Department. eTel offers integrated CMMI Level 3 processes, tools, and techniques with innovative, cost-efficient, and secure solutions to address complex challenges. eTel also holds ISO 9001:2015, ISO/IEC 27001:2013, and ISO/IEC 20000-1:2018 certifications, and offers dedicated subject matter experts (SMEs) and thought leaders that possess a deep understanding of customers' environments and challenges. Work Location and On-Site/Telework Requirements: Hybrid - NIH, Bethesda, MD. On site for workshops and pilots (typically 1-2 days/week during the first 120 days, then as scheduled). Citizenship: U.S. Citizenship required Clearance: All staff must obtain NIH suitability and a PIV credential and be fluent in English. Anyone doing risk or vulnerability testing needs a current T2 (BI) or higher investigation. Salary Range: $130,000-$140,000 yearly salary Overview : You will co-author the cloud, network, and identity design patterns behind NIH's Future State ZTA under the NIH Governance, Risk & Compliance (GRC) Zero Trust Architecture (ZTA) Support Services task order for the NIH Office of the Chief Information Officer (OCIO). You will work in the Architecture Pod on Tasks 2, 3, and 4. This is a design and advisory role: you will produce reference architectures, patterns, and control mappings for NIH teams to implement, not operate NIH production systems. Deep hands-on engineering experience is still essential. Responsibilities : Co-author the cloud, on-premises, and hybrid reference architectures (Subtask 2.2) with the Senior ZT Architect, as reusable design patterns with NIST SP 800-53 Rev 5 control mappings. Design microsegmentation and workload-identity patterns (NIST SP 800-207A, CISA and NSA Zero Trust guidance), software-defined perimeter for HPC clusters, and isolated VLANs with brokered remote access for laboratory instruments. Document how centrally provided network, endpoint, and logging services are inherited, as input to the Centrally Provided Services Matrix. Define technical policy anchors for the network and device pillars (segmentation policy in the controller, compliance policy in endpoint management). Map controls to telemetry so continuous-monitoring evidence is collected rather than written by hand. Support Task 3 network use cases: flow baselining to generate and validate microsegmentation policy, and lateral-movement anomaly detection. Support the Task 4 gap assessment for the network, device, and cloud pillars, and the evidence expectations in the ZTA Overlay. Validate patterns with IC engineering teams (CIT, HPC, and clinical platform owners). Tools & Technology Environment : AWS and Azure (including GovCloud), cloud-native IAM and CSPM; SSE/ZTNA (e.g., Zscaler, Palo Alto); microsegmentation platforms (e.g., Illumio); Palo Alto/Fortinet/Cisco firewalls; Microsoft Defender, CrowdStrike, Forescout; Splunk/Microsoft Sentinel; Terraform/IaC; Git. Required Qualifications : Bachelor's degree plus 7+ years of network and/or cloud security engineering. Hands-on experience with identity-aware access, microsegmentation, and cloud security patterns in enterprise environments. Experience with firewalls, SSE/ZTNA, and native AWS or Azure security services. Security+ or a higher security certification. Ability to obtain an NIH suitability determination and PIV credential; fluent in English. Preferred Qualifications : A cloud security certification (AWS Security Specialty, AZ-500, or CCSP); PCNSE or CCNP Security. Experience in FedRAMP-authorized or GovCloud environments. Experience with research networks, HPC (Linux/Slurm), or operational technology/IoT device segmentation. Infrastructure-as-code (Terraform, CloudFormation) and experience writing security patterns as code. Current National Institutes of Health (NIH) or U.S. Department of Health and Human Services (HHS) experience is highly preferred. Commitment to Diversity - eTelligent Group provides equal employment opportunities (EEO) to all applicants without regard to race, color, religion, gender, sexual orientation, gender identity, nations origin, age, disability, genetic information, marital status, amnesty, status as a covered veteran, and any other characteristic provided in accordance with applicable, federal, state and local laws.

Job Family: Technology Consulting Travel Required: None Clearance Required: Ability to Obtain Public Trust What You Will Do: Support a federal Chief Information Officer (CIO) in enhancing office operations and project delivery across a wide range of initiatives and systems. Lead the development of strategic plans, roadmaps, and project plans that support complex technology integration efforts. Provide insights to clients to help establish project priorities, resources, and timelines, building trusted relationships with stakeholders along the way. Initiate, execute, and close out projects of varying scope, size, and complexity while serving as a senior business analyst. Sourcing and evaluating customer requirements across multiple systems and stakeholder groups. Track the delivery of key initiatives and enable success through strong analysis and coordination. Use technical expertise to identify and escalate project risks and dependencies. Collaborate with agency leaders, vendors, and contracting teams to support successful delivery. Manage and monitor data calls provided by internal and external stakeholders. Create and report briefings to client leadership. Own and execute additional key Department initiatives as required by the CIO. What You Will Need: U.S. citizenship is contractually required for this role. Must be able to OBTAIN and MAINTAIN a Federal or DoD "PUBLIC TRUST"; candidates must obtain approved adjudication of their PUBLIC TRUST prior to onboarding with Guidehouse. Minimum of EIGHT (8) or more years of experience supporting technology projects. PMP Certification is highly preferred, but ability to obtain is required. Demonstrated success delivering multiple technology initiatives and building deep trust with customers and stakeholders. Experience managing or supporting technical projects, escalating risks, and/or managing schedules. Experience with enterprise systems and deployments (e.g. IT Service Management, Change Requests, and/or Business Analysis, etc.). Ability to understand complex system and project needs and translate them into actionable business analysis. What Would Be Nice To Have: Bachelor's degree is highly preferred An ACTIVE and MAINTAINED TOP SECRET Federal or DoD security clearance. Excellent verbal and written communication skills. Consulting experience; Federal government consulting a plus. The annual salary range for this position is $113,000.00-$188,000.00. Compensation decisions depend on a wide range of factors, including but not limited to skill sets, experience and training, security clearances, licensure and certifications, and other business and organizational needs. What We Offer: Guidehouse offers a comprehensive, total rewards package that includes competitive compensation and a flexible benefits package that reflects our commitment to creating a diverse and supportive workplace. Benefits include: Medical, Rx, Dental & Vision Insurance Personal and Family Sick Time & Company Paid Holidays Position may be eligible for a discretionary variable incentive bonus Parental Leave and Adoption Assistance 401(k) Retirement Plan Basic Life & Supplemental Life Health Savings Account, Dental/Vision & Dependent Care Flexible Spending Accounts Short-Term & Long-Term Disability Student Loan PayDown Tuition Reimbursement, Personal Development & Learning Opportunities Skills Development & Certifications Employee Referral Program Corporate Sponsored Events & Community Outreach Emergency Back-Up Childcare Program Mobility Stipend About Guidehouse Guidehouse is an Equal Opportunity Employer-Protected Veterans, Individuals with Disabilities or any other basis protected by law, ordinance, or regulation. Guidehouse will consider for employment qualified applicants with criminal histories in a manner consistent with the requirements of applicable law or ordinance including the Fair Chance Ordinance of Los Angeles and San Francisco. If you have visited our website for information about employment opportunities, or to apply for a position, and you require an accommodation, please contact Guidehouse Recruiting at 1- or via email at . All information you provide will be kept confidential and will be used only to the extent required to provide needed reasonable accommodation. All communication regarding recruitment for a Guidehouse position will be sent from Guidehouse email domains or . Correspondence received by an applicant from any other domain should be considered unauthorized and will not be honored by Guidehouse. Note that Guidehouse will never charge a fee or require a money transfer at any stage of the recruitment process and does not collect fees from educational institutions for participation in a recruitment event. Never provide your banking information to a third party purporting to need that information to proceed in the hiring process. If any person or organization demands money related to a job opportunity with Guidehouse, please report the matter to Guidehouse's Ethics Hotline. If you want to check the validity of correspondence you have received, please contact . Guidehouse is not responsible for losses incurred (monetary or otherwise) from an applicant's dealings with unauthorized third parties. Guidehouse does not accept unsolicited resumes through or from search firms or staffing agencies. All unsolicited resumes will be considered the property of Guidehouse and Guidehouse will not be obligated to pay a placement fee.

Job DescriptionJob DescriptionDescription: JOB SUMMARY: The Domestic Violence Child Welfare Advocate serves as a subject matter expert and consultant for child welfare staff and community partners under the Partners in Protection Program, to enhance survivor and child safety while holding batterers accountable in domestic violence cases. As a PIP Domestic Violence Child Welfare Advocate, they will assist in identifying needs, establishing goals, navigating community resources, and help overcome barriers to safety and stability. The Domestic Violence Child Welfare Advocate will be co-located at least 60% of their time with a Department of Children and Families (DCF) Child Protective Investigations (CPI) Unit that oversees Orange County child welfare cases. ESSENTIAL FUNCTIONS: Works to make contact, build rapport, and work directly with CPI's and other PIP affiliates in assessing domestic violence cases to determine areas of need, set goals, provide consultations and subject matter expertise. Assists in developing case/service management plans and provides referrals to community service providers to help achieve the goals set forth on the case/service management plan. Conducts follow-up meetings with CPI's and other PIP affiliates to assess progress toward completion of goals and identify areas requiring further assistance. Provides trainings for CPI's and other PIP affiliates, attends relevant program meetings, staffing's and case management reviews with peers and supervisors. Provides immediate support, advocacy, safety planning, lethality assessments and crisis intervention counseling to survivors of domestic violence. Work closely with Harbor House Community Services Advocates, Criminal Justice Advocates, and Shelter Services Advocates to ensure coordination of services. Compiles and records statistical data as it relates to the PIP Program, that will be entered in our client database and submitted on monthly and quarterly reports. Provides assistance/accompaniment and support for CPI's, PIP affiliates and survivors at court hearings. Assists in determining if survivors meet the criteria for filing an injunction. Performs other duties as assigned. MARGINAL DUTIES This position description has excluded the marginal functions of the position that are incidental to the performance of essential job duties. Employee(s) will be required to follow any other job-related instructions and to perform any other job-related duties requested by any person authorized to give instructions or assignments. KNOWLEDGE, SKILLS AND ABILITIES: Ability to provide and maintain accurate client and service records that meet audit requirements. Ability to establish and maintain effective working relations with various community agencies, coalitions, and agency staff. Ability to complete necessary records, outcome measures, schedules and time sheets in an accurate and timely manner. Knowledge of DCF, child protective investigations, and the dependency court process Case management skills. Ability to provide effective and immediate crisis intervention for survivors Excellent oral and written communication and advocacy skills. Ability to provide leadership in a work and community setting. Ability to work with a moderate noise level. Ability to effectively prioritize and work independently with little or no supervision. Ability to manage in a manner conductive to high productivity. Ability to work in an environment with many interruptions. Proficiency in basic to intermediate computer skills, including Microsoft Office and database software. Requirements: PHYSICAL REQUIREMENTS: Frequently standing, sitting, and walking. Some stooping, lifting and bending. Talking, hearing, seeing, repetitive motions. These requirements may not be all inclusive. All duties and responsibilities are essential job functions and requirements and are subject to possible modification to reasonably accommodate individuals with disabilities. To perform this job successfully, the employee will possess the skills, aptitudes, and abilities to perform each duty proficiently. Some requirements may exclude individuals who pose a direct threat or significant risk to the health or safety of themselves or others. MINIMUM REQUIREMENTS: Education: High School Diploma or GED required. Associate's or Bachelor's degree in Social Work, Human Services, Psychology, Criminal Justice, Counseling, or a related field preferred. Experience: Minimum of one (1) year of experience providing domestic violence victim advocacy, community outreach, resource navigation, case coordination, or direct services to survivors of domestic violence, sexual violence, child welfare, or other vulnerable populations is required. Experience collaborating with community partners, multidisciplinary teams and training in the Safe & Together model for child welfare cases is preferred. Discretion: Professional experience may be substituted for formal education at the discretion of the Chief Executive Officer. Licensing: Valid Florida Driver's License with a clean record for the past 5 years. Must be 21 years or older to meet agency insurance requirements. Skills: Proficiency in Microsoft Office applications (Word, Excel, PowerPoint). Ability to learn organization-specific software, including databases and content management systems. Strong professional writing and communication skills. Ability to manage multiple priorities in a fast-paced environment with attention to detail. Training Requirements: Completion of CORE Competency training within 90 days of hire. Additional mandatory training is required on an annual basis per Agency Policies & Procedures.

Job DescriptionJob DescriptionDescription: JOB SUMMARY: The Domestic Violence Child Welfare Advocate serves as a subject matter expert and consultant for child welfare staff and community partners under the Partners in Protection Program, to enhance survivor and child safety while holding batterers accountable in domestic violence cases. As a PIP Domestic Violence Child Welfare Advocate, they will assist in identifying needs, establishing goals, navigating community resources, and help overcome barriers to safety and stability. The Domestic Violence Child Welfare Advocate will be co-located at least 60% of their time with a Department of Children and Families (DCF) Child Protective Investigations (CPI) Unit that oversees Orange County child welfare cases. ESSENTIAL FUNCTIONS: Works to make contact, build rapport, and work directly with CPI's and other PIP affiliates in assessing domestic violence cases to determine areas of need, set goals, provide consultations and subject matter expertise. Assists in developing case/service management plans and provides referrals to community service providers to help achieve the goals set forth on the case/service management plan. Conducts follow-up meetings with CPI's and other PIP affiliates to assess progress toward completion of goals and identify areas requiring further assistance. Provides trainings for CPI's and other PIP affiliates, attends relevant program meetings, staffing's and case management reviews with peers and supervisors. Provides immediate support, advocacy, safety planning, lethality assessments and crisis intervention counseling to survivors of domestic violence. Work closely with Harbor House Community Services Advocates, Criminal Justice Advocates, and Shelter Services Advocates to ensure coordination of services. Compiles and records statistical data as it relates to the PIP Program, that will be entered in our client database and submitted on monthly and quarterly reports. Provides assistance/accompaniment and support for CPI's, PIP affiliates and survivors at court hearings. Assists in determining if survivors meet the criteria for filing an injunction. Performs other duties as assigned. MARGINAL DUTIES This position description has excluded the marginal functions of the position that are incidental to the performance of essential job duties. Employee(s) will be required to follow any other job-related instructions and to perform any other job-related duties requested by any person authorized to give instructions or assignments. KNOWLEDGE, SKILLS AND ABILITIES: Ability to provide and maintain accurate client and service records that meet audit requirements. Ability to establish and maintain effective working relations with various community agencies, coalitions, and agency staff. Ability to complete necessary records, outcome measures, schedules and time sheets in an accurate and timely manner. Knowledge of DCF, child protective investigations, and the dependency court process Case management skills. Ability to provide effective and immediate crisis intervention for survivors Excellent oral and written communication and advocacy skills. Ability to provide leadership in a work and community setting. Ability to work with a moderate noise level. Ability to effectively prioritize and work independently with little or no supervision. Ability to manage in a manner conductive to high productivity. Ability to work in an environment with many interruptions. Proficiency in basic to intermediate computer skills, including Microsoft Office and database software. Requirements: PHYSICAL REQUIREMENTS: Frequently standing, sitting, and walking. Some stooping, lifting and bending. Talking, hearing, seeing, repetitive motions. These requirements may not be all inclusive. All duties and responsibilities are essential job functions and requirements and are subject to possible modification to reasonably accommodate individuals with disabilities. To perform this job successfully, the employee will possess the skills, aptitudes, and abilities to perform each duty proficiently. Some requirements may exclude individuals who pose a direct threat or significant risk to the health or safety of themselves or others. MINIMUM REQUIREMENTS: Education: High School Diploma or GED required. Associate's or Bachelor's degree in Social Work, Human Services, Psychology, Criminal Justice, Counseling, or a related field preferred. Experience: Minimum of one (1) year of experience providing domestic violence victim advocacy, community outreach, resource navigation, case coordination, or direct services to survivors of domestic violence, sexual violence, child welfare, or other vulnerable populations is required. Experience collaborating with community partners, multidisciplinary teams and training in the Safe & Together model for child welfare cases is preferred. Discretion: Professional experience may be substituted for formal education at the discretion of the Chief Executive Officer. Licensing: Valid Florida Driver's License with a clean record for the past 5 years. Must be 21 years or older to meet agency insurance requirements. Skills: Proficiency in Microsoft Office applications (Word, Excel, PowerPoint). Ability to learn organization-specific software, including databases and content management systems. Strong professional writing and communication skills. Ability to manage multiple priorities in a fast-paced environment with attention to detail. Training Requirements: Completion of CORE Competency training within 90 days of hire. Additional mandatory training is required on an annual basis per Agency Policies & Procedures.

Job DescriptionJob DescriptionDescription: JOB SUMMARY: The Domestic Violence Child Welfare Advocate serves as a subject matter expert and consultant for child welfare staff and community partners under the Partners in Protection Program, to enhance survivor and child safety while holding batterers accountable in domestic violence cases. As a PIP Domestic Violence Child Welfare Advocate, they will assist in identifying needs, establishing goals, navigating community resources, and help overcome barriers to safety and stability. The Domestic Violence Child Welfare Advocate will be co-located at least 60% of their time with a Department of Children and Families (DCF) Child Protective Investigations (CPI) Unit that oversees Orange County child welfare cases. ESSENTIAL FUNCTIONS: Works to make contact, build rapport, and work directly with CPI's and other PIP affiliates in assessing domestic violence cases to determine areas of need, set goals, provide consultations and subject matter expertise. Assists in developing case/service management plans and provides referrals to community service providers to help achieve the goals set forth on the case/service management plan. Conducts follow-up meetings with CPI's and other PIP affiliates to assess progress toward completion of goals and identify areas requiring further assistance. Provides trainings for CPI's and other PIP affiliates, attends relevant program meetings, staffing's and case management reviews with peers and supervisors. Provides immediate support, advocacy, safety planning, lethality assessments and crisis intervention counseling to survivors of domestic violence. Work closely with Harbor House Community Services Advocates, Criminal Justice Advocates, and Shelter Services Advocates to ensure coordination of services. Compiles and records statistical data as it relates to the PIP Program, that will be entered in our client database and submitted on monthly and quarterly reports. Provides assistance/accompaniment and support for CPI's, PIP affiliates and survivors at court hearings. Assists in determining if survivors meet the criteria for filing an injunction. Performs other duties as assigned. MARGINAL DUTIES This position description has excluded the marginal functions of the position that are incidental to the performance of essential job duties. Employee(s) will be required to follow any other job-related instructions and to perform any other job-related duties requested by any person authorized to give instructions or assignments. KNOWLEDGE, SKILLS AND ABILITIES: Ability to provide and maintain accurate client and service records that meet audit requirements. Ability to establish and maintain effective working relations with various community agencies, coalitions, and agency staff. Ability to complete necessary records, outcome measures, schedules and time sheets in an accurate and timely manner. Knowledge of DCF, child protective investigations, and the dependency court process Case management skills. Ability to provide effective and immediate crisis intervention for survivors Excellent oral and written communication and advocacy skills. Ability to provide leadership in a work and community setting. Ability to work with a moderate noise level. Ability to effectively prioritize and work independently with little or no supervision. Ability to manage in a manner conductive to high productivity. Ability to work in an environment with many interruptions. Proficiency in basic to intermediate computer skills, including Microsoft Office and database software. Requirements: PHYSICAL REQUIREMENTS: Frequently standing, sitting, and walking. Some stooping, lifting and bending. Talking, hearing, seeing, repetitive motions. These requirements may not be all inclusive. All duties and responsibilities are essential job functions and requirements and are subject to possible modification to reasonably accommodate individuals with disabilities. To perform this job successfully, the employee will possess the skills, aptitudes, and abilities to perform each duty proficiently. Some requirements may exclude individuals who pose a direct threat or significant risk to the health or safety of themselves or others. MINIMUM REQUIREMENTS: Education: High School Diploma or GED required. Associate's or Bachelor's degree in Social Work, Human Services, Psychology, Criminal Justice, Counseling, or a related field preferred. Experience: Minimum of one (1) year of experience providing domestic violence victim advocacy, community outreach, resource navigation, case coordination, or direct services to survivors of domestic violence, sexual violence, child welfare, or other vulnerable populations is required. Experience collaborating with community partners, multidisciplinary teams and training in the Safe & Together model for child welfare cases is preferred. Discretion: Professional experience may be substituted for formal education at the discretion of the Chief Executive Officer. Licensing: Valid Florida Driver's License with a clean record for the past 5 years. Must be 21 years or older to meet agency insurance requirements. Skills: Proficiency in Microsoft Office applications (Word, Excel, PowerPoint). Ability to learn organization-specific software, including databases and content management systems. Strong professional writing and communication skills. Ability to manage multiple priorities in a fast-paced environment with attention to detail. Training Requirements: Completion of CORE Competency training within 90 days of hire. Additional mandatory training is required on an annual basis per Agency Policies & Procedures.

Who we are At Domino, we build solutions that help the largest, highly regulated organizations adopt AI to accelerate mission-critical use cases. Our platform integrates a streamlined model and app development environment, advanced model, agent, and app hosting capabilities, and novel governance capabilities providing regulator-ready AI at scale. Our customers - like Johnson & Johnson, GSK, Bristol Myers, UBS, FINRA and the US Navy - are using our software to solve some of the most important challenges in the world, such as developing new medicines, securing our financial markets, or protecting our country. Backed by Sequoia Capital, Coatue Management, NVIDIA, Snowflake and other leading investors, we have been in business for over a decade but are still a small team operating with the spirit of a startup. In the world of AI today, we believe that the future is still being invented - and we want to be the ones building it. For more information, visit What we are building Domino is the platform enterprises trust when the stakes on AI are highest. Global pharma running drug-discovery pipelines, top-five insurers underwriting billion-dollar risk, defense and intelligence agencies retraining mission-critical systems. Every model has to be auditable, defensible and reproducible from the day it's built. This is why Gartner has recognised us three times in the Enterprise Data Science & ML Platforms category. Frontier models have unlocked a new class of AI applications regulated companies couldn't previously ship - the governance, auditability and control primitives weren't there. Domino is building that layer. As a technical Product Manager, you'll own capabilities within it and shape the next chapter of what regulated enterprise AI looks like. What your impact will be Advance our Governance feature set - embedding model validation, review and audit-readiness directly into the development lifecycle, including automated model documentation and modern takes on longstanding requirements like attestation and revalidation. Shape the Extensions framework, a new product surface for embedding custom capabilities into the platform: model risk management, onboarding, inventory, and audit-ready documentation. Lead the next generation of AI/ML lifecycle capabilities, with a specific focus on generative AI and advanced AI systems. Strengthen how customers deploy, host, secure and administer Domino across SaaS and customer-managed environments. Partner directly with customer executives - up to and including CIOs, CTOs and Chief Data Officers at Fortune 100 companies - to turn their hardest operational-AI problems into product decisions. What we look for in this role This role is for builders. We're looking for PMs who default to shipping, who can carry a technical conversation on their own merit, and whose past work stands up to engineering scrutiny. 5+ years of product management experience shipping enterprise software to developers, ML engineers, quantitative researchers, data scientists or similar practitioners - users who write code as their primary interface with the product. Non-negotiable. Strong technical background - computer science or an equivalent discipline - and a track record of solving hard product problems where the difficulty is intrinsic, not superficial. You operate as a peer in system design conversations, not a translator. Customer-first instincts. You've owned enterprise customer relationships in prior roles and are comfortable running product conversations inside large, politically complex organisations. You listen carefully, read a stakeholder map, and turn what customers actually need into product decisions. Execution-focused. You want to join at an inflection point, not a steady state - at your best when synthesising customer signal, market direction and technical constraint into bets that ship. Bonus: hands-on familiarity with data science / AI workflows, or experience shipping product into regulated environments. What we value We strongly believe in the value of growing a diverse team and encourage people of all backgrounds, genders, ethnicities, abilities, and sexual orientations to apply We value a growth mindset. High-performing creative individuals who dig into problems and see the opportunities for success We believe in individuals who seek truth and speak the truth and can be their whole selves at work. We value all of you that believe improving is always possible. At Domino, everything is a work in progress - we can do better at everything. We emphasize an environment of teaching and learning to equip employees with the tools needed to be successful in their function and the company. Visa Sponsorship: Visa sponsorship (including H-1B and other employment-based visa categories) may be available for this position depending on business considerations and the role's requirements. Sponsorship eligibility is assessed on an individual basis and is not guaranteed for any role or candidate. All applicants are encouraged to apply regardless of current or future immigration status. The annual US base salary range for this role is listed below. For sales roles, the range provided is the role's On Target Earnings ("OTE") range, meaning that the range includes both the sales commissions/sales bonuses target and annual base salary for the role. This salary range will be narrowed during the interview process based on a number of factors, including the candidate's experience, qualifications, and location. Additional benefits for this role may include: equity, company bonus or sales commissions/bonuses; 401(k) plan; medical, dental, and vision benefits; and wellness stipends. Compensation Range $225,000-$300,000 USD

Job Description Job Description We are an employee-centric company that truly values our team members and the contributions they make to our customers and the missions they support. We pride ourselves on being forward-leaning thinkers and on building teams that are, and continue to be, technically proficient across a broad range of cyber mission areas. OneZero full-time employees receive a highly competitive benefits package, including health, dental, vision, and life insurance, a 401(k) with company matching, paid time off and holidays, an employee referral program, and educational assistance. Additional details are available on our website: Position Title : Security Control Assessor (SME), Level IIILocation: USCG Surface Forces Logistics Center, 2401 Hawkins Point Road, Baltimore, MD 21226. Work may also be performed at the SFLC satellite offices at 707 East Ordnance Road, approximately one mile from the primary site, and at other sites as determined necessary by the Contracting Officer's Representative (COR).Clearance:No security clearance required. This position does not involve access to classified information or classified IT systems.S. citizenship is required in accordance with HSAR 3052.204-71 Alternate I.Position SummaryThe Security Control Assessor (SCA) provides independent security control assessment and authorization support to the USCG SFLC Business Operations Division in support of Surface Domain Operational Technology (OT) and Platform IT systems. The role is the assessment authority on the team: it evaluates whether security and privacy controls are implemented correctly, operating as intended, and producing the intended outcome, and it provides the evidence the Authorizing Official relies on to make risk decisions.This is the senior assessment position on the task order and is distinct from the ISSO roles, which own and maintain the authorization packages. The SCA assesses; the ISSOs prepare and sustain. The position is expected to operate with a high degree of independence and to advise the OT Security Manager (ISSM) directly.Key ResponsibilitiesSupport the OT Security Manager (ISSM) and staff in establishing and maintaining the programs, procedures, and policies that protect Government Sensitive But Unclassified (SBU) information.Perform independent assessments of SFLC Operational Technology to verify that applicable security and privacy controls are implemented correctly, operating as intended, and producing the desired outcome.Provide security assessment and authorization consultation services to the ISSM, on site.Review existing policies, procedures, and guidelines for compliance with DHS, USCG, and DoD cybersecurity policy; draft or revise SFLC policy documentation for ISSM review, approval, and organizational implementation.Assist in preparing RMF security authorization documentation for submission to the Authorizing Official (AO).Maintain security assessment information and supporting documentation within Government-designated systems and repositories.Create and validate SFLC security assessment and authorization accounts within Government-designated systems and tools.Update and maintain assessment and authorization status within Government-designated tracking systems and databases.Upload, track, and update Plans of Action and Milestones (POA recommend POA&M updates based on assessment results and maintain traceability from identified vulnerabilities through to the applicable POA&M.Conduct vulnerability scans of SFLC OT, networks, devices, and associated components using Government-approved tools.Provide assistance to system administrators in remediating vulnerabilities identified through scanning.Provide vulnerability and risk management support in conjunction with assessment and authorization activities.Maintain the enterprise tracking log for electronic spillage activities in accordance with Government policy.Support the destruction of removable media generated during assessment activities in accordance with Government procedures.Support cybersecurity strategic planning and continuous monitoring activities, evaluating enterprise services through assessment of priorities and risk.Provide bi-weekly status reports to the SFLC OT Security Manager (ISSM).Conduct a monthly project status update briefing to the ISSM at SFLC Baltimore.Required QualificationsExperienceTen (10) or more years of progressive cybersecurity experience, including at least five (5) years performing security control assessments or independent A&A validation in a federal environment.Demonstrated experience executing NIST SP 800-37 RMF end to end, including control assessment against NIST SP 800-53A.Experience assessing systems to a formal authorization decision and producing assessment artifacts relied upon by an Authorizing Official.Experience conducting and interpreting vulnerability scans and translating findings into risk-based recommendations and POA&M entries.Experience drafting and revising organizational cybersecurity policy for Government review and adoption.CertificationMust hold and maintain at least one active certification approved for Information Assurance Management (IAM) Level II or Level III. Any one of the following satisfies the requirement:CISSP - Certified Information Systems Security Professional (or CISSP Associate)CISM - Certified Information Security ManagerCGRC - Governance, Risk and Compliance Certification (formerly CAP)CASP+ - CompTIA Advanced Security PractitionerGSLC - GIAC Security Leadership CertificationCCISO - EC-Council Certified Chief Information Security Officer (Level III only)Certification requirements are subject to confirmation against COMDTINST M2620.2 (series) Appendix D, the controlling USCG certification matrix. Verify the accepted certification list with the Program Manager before extending an offer.Evidence of active certification in good standing is required prior to onboarding. Waivers and exceptions to certification requirements will not be granted.Certifications must remain current, active, and in good standing throughout performance. Loss, lapse, or revocation of a required certification is grounds for removal from the contract. Continuing education required to maintain certification is at the employee's and company's expense.Ability to work independently and advise a Government security manager at the senior level.Strong written communication: the role produces bi-weekly written reporting and briefs the ISSM monthly.Ability to read, write, speak, and understand English fluently.Preferred QualificationsPrior USCG, DHS, or DoD assessment experience, particularly with Surface Domain OT or Platform IT systems.Familiarity with COMDTINST M2620.2 (series) and COMDTINST 5500.13 (series).Experience assessing OT/ICS or PIT systems where conventional endpoint tooling cannot be deployed.CGRC (formerly CAP), CISA, or GSNA in addition to the required baseline certification.Experience supporting DHS SELC-aligned programs.Master's degree in cybersecurity, information systems, or a related field.Technical SkillsNIST SP 800-37 (RMF), 800-53 / 53A / 53B, 800-137 (ISCM), FIPS 199 and FIPS 200DHS 4300A Sensitive Systems Handbook and the DHS Systems Engineering Life Cycle (SELC)Government-designated A&A repositories and tracking tools (e.g., eMASS or successor)DISA Security Technical Implementation Guides (STIGs) and Security Requirements Guides (SRGs)Government-approved vulnerability scanning and compliance tooling (e.g., ACAS/Nessus, SCAP-validated scanners)POA&M development, tracking, and closure, including waiver and risk acceptance packagesOperational Technology (OT), Platform IT (PIT), and industrial control system environments, including constraints on agent-based toolingNIST SP 800-30 risk assessment methodology and NIST SP 800-115 technical assessment techniquesElectronic spillage handling and removable media sanitization proceduresSecurity ClearanceNo security clearance required. This position does not involve access to classified information or classified IT systems.S. citizenship is required in accordance with HSAR 3052.204-71 Alternate I.A favorably adjudicated Tier 1 background investigation (or higher) is required. Candidates without an existing investigation on file must complete an Electronic Application (eApp) for investigation processing.Note to recruiting: per the task order, the position is not billable until the selected candidate is fully cleared, has a CAC in hand, and has reported to the work site. Fill timelines should assume 30-90 days for investigation and CAC issuance.EducationBachelor 's degree in cybersecurity, computer science, information systems, engineering, or a related field.Work EnvironmentPrimarily on-site at SFLC Baltimore. On-site presence is required for the monthly status briefing to the ISSM and for participation in change management boards, technical exchange meetings, and Government working groups.The Government furnishes workspace, telephone, a Standard Workstation, and copy/fax access.Remote work may be authorized at the sole discretion of the Government. If authorized, compliant hardware, software, and internet service are contractor- furnished.Occasional travel outside the local commuting area may be required for training and associated off-site meetings, subject to advance COR approval and reimbursed per the Federal Travel Regulations. The 707 East Ordnance Road satellite office is within the local commuting area.OneZero Solutions, LLC is an Equal Opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, pregnancy, genetic information, disability, status as a protected veteran, or any other protected category under applicable federal, state, and local laws.To request an accommodation . click apply for full job details

Job Description Job Description Dark Wolf Solutions is seeking a Senior Security Control Assessor Representative (SCAR) to conduct independent comprehensive assessments of the management, operation, and technical security controls and control enhancements employed within, or inherited by, an Information technology (IT) system to determine the overall effectiveness of the controls. The SCAR will perform reviews of security artifacts for system authorizations, assessing both the technical and functional adequacy as required for application and software cybersecurity readiness. The SCAR candidate must have prior experience in authorizing tools/applications, systems, and/or enclaves. Additionally, knowledge of network security, technologies, processes, and practices designed for the prevention of damage to, protection of, and restoration of computers, communications systems, services, and various types of communications technologies. The SCAR candidate must be knowledgeable and proficient in assessing DoD GovCloud environments to include testing controls and validating artifacts. A successful candidate will have a strong foundational understanding of NIST, DOD, and DAF cybersecurity focused guidance. This position can be based out of any Dark Wolf Office location and will be a hybrid schedule. Additional responsibilities include: Key Responsibilities: Evaluating IT infrastructure in terms of risk to the organization and defining artifacts required to meet Federal, DoD and DAF requirements Assessing IT systems and architecture to ensure compliance with the Risk Management Framework (RMF), NIST Cybersecurity Framework (CSF), NIST 800-53 revision 5 and applicable guidance Supporting the system/application assessment and authorization (A&A) effort, to include assessing and guiding the quality and completeness of A&A activities, tasks and resulting artifacts mandated by governing DoD and AF policies, and applicable mandates Collecting, reviewing and verifying documented business processes within process narratives or flowcharts, identifying risks and validating proficiency of mitigating controls Reviewing risk and control matrices and testing plans for key controls and determines effectiveness Identifying control gaps, reviewing and testing the design of existing controls. Formulating clear and concise conclusions on internal controls and business process efficiency Recommending policies and procedures to ensure information systems reliability and accessibility and to prevent and defend against unauthorized access to systems, networks, and data Conducting risk and vulnerability assessments of installed information systems to identify vulnerabilities, risks, and protection needs Reviewing Plans of Actions & Milestones (POA&Ms) Providing recommendations and reports to the Security Control Assessor (SCA), Authorizing Official (AO), Chief Information Security Officer (CISO) Reviewing network and systems design to ensure accuracy Ensuring the rigorous application of information security/cybersecurity policies, principles, and practices in the delivery of all IT services Required Qualifications: 15+ years of relevant Cyber experience 15+ years prior experience as a Security Control Assessor/Representative RMF Engineer, ISSO, ISSM and/or information assurance engineer Cloud Platform experience with at least one service offering from AWS, Azure, or Google GCP Hands-on eMASS and/or Xacta experience completing full system lifecycle activities Experience with Air Force risk management policies/procedures, to include, DODI 8510.01, AFI 17-101 Experience with Cloud Computing Security Requirements Guide (CC SRG) Knowledgeable with DoD DevSecOps Fundamentals Playbook Experience evaluating information security compliance against STIGs Ability to clearly articulate ideas Strong technical writing abilities to author reports for AO and CISO dissemination Exudes confidence in providing briefings, presentations, and in conducting/guiding meetings with senior leadership and stakeholders Ability to use prior experience and knowledge to address new situations Certification requirements (at least one of the following): SecurityX / CASP+, CCISO, CGRC/CAP, CISA, CISM, CISSO, CISSP, CISSP-ISSEP, Cloud+, CySA+, FITSP-A, GCSA, GSEC, GSLC, GSNA, PenTest+, Security+ B.A. or B.S. Information Security, Computer Science or related discipline US Citizenship and currently possess a Top Secret security clearance Desired Qualifications: Experience with Fast Track ATO Handbook & AF Continuous ATO Playbook Familiarity with CI/CD Pipelines DevSecOps experience Sharepoint, JIRA, Confluence familiarity The salary range for this position is $140,000.00 - $145,000.00 commensurate on experience and technical skillset. We are open to considering a variety of levels of experience for these projects and potential for 1099 hourly opportunity. We are proud to be an EEO/AA Employer Minorities/Women/Veterans/Disabled and other protected categories. In compliance with federal law, all persons hired will be required to verify identity, confirm US Citizenship, and complete the required employment eligibility verification upon hire.

Job Description Job Description OVERVIEW Hendall is currently seeking a Systems and Information Security Specialist experienced with the Federal Information Security Management Act (FISMA), U.S. Department of Health and Human Services (HHS), Office of Management and Budget (OMB), and the National Institute of Standards and Technology (NIST) regulations, policies, and guidelines. DUTIES The Systems and Information Security Specialist analyzes, defines, implements, and maintains all required procedures and security controls in accordance with Federal, and HHS regulations, policies, and guidelines. Specifically: Conduct Security Assessment and Authorization (SA&A) processes and procedures to attain Authorization To Operate (ATO) for supported information systemsRemediate security weaknesses through the implementation of Plan of Actions & Milestones (POA&Ms)Perform risk analyses which also includes risk assessment, mitigation and contingency planning.Develop and maintain information security policies, procedures and control techniques in accordance with FISMA and NIST Special Publications 800 SeriesDevelop and maintain BHSIS Information System Security Plan and IT PlanAssist with the preparation and maintenance of OMB required forms and other paperwork for major IT investmentsPerform periodic reviews to ensure compliance with existing information security and privacy requirements.Continuously monitor system(s) security controls and operational environmentComplete annual system self-assessments, and support quarterly and annual FISMA reporting requirementsConduct monthly Database, Application and Operating System vulnerability scans and report outcomes to clients' Chief Information System Officer (CISO)Perform annual penetration testing on client systems and provide test reports to clientsAct as liaison between clients' CISO and HendallMINIMUM QUALIFICATIONS Bachelor's degree in computer science, information systems or information technology3-5 years of professional experience in Federal IT SecurityCertified Information Systems Security Professional (CISSP) certification or similar (Preferred)Experience working in a Federal Information Processing Standard (FIP) 199 Moderate categorized system environmentStrong verbal and written communication skills Highly organized and detail oriented Ability to maintain and manage ATO-related controls and other information security artifactsPREFERRED QUALIFICATIONSExperience performing information security services within the Department of Health and Human Services and its operating divisions.Salary Range: $90,000/year to $110,000/yearFor a complete listing of benefits, please visit our careers page at Inc. is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, or protected veteran status and will not be discriminated against on the basis of disability.

Job Description Job Description Dark Wolf Solutions is seeking a Senior Security Control Assessor Representative (SCAR) to conduct independent comprehensive assessments of the management, operation, and technical security controls and control enhancements employed within, or inherited by, an Information technology (IT) system to determine the overall effectiveness of the controls. The SCAR will perform reviews of security artifacts for system authorizations, assessing both the technical and functional adequacy as required for application and software cybersecurity readiness. The SCAR candidate must have prior experience in authorizing tools/applications, systems, and/or enclaves. Additionally, knowledge of network security, technologies, processes, and practices designed for the prevention of damage to, protection of, and restoration of computers, communications systems, services, and various types of communications technologies. The SCAR candidate must be knowledgeable and proficient in assessing DoD GovCloud environments to include testing controls and validating artifacts. A successful candidate will have a strong foundational understanding of NIST, DOD, and DAF cybersecurity focused guidance. This position can be based out of any Dark Wolf Office location and will be a hybrid schedule. Additional responsibilities include: Key Responsibilities: Evaluating IT infrastructure in terms of risk to the organization and defining artifacts required to meet Federal, DoD and DAF requirements Assessing IT systems and architecture to ensure compliance with the Risk Management Framework (RMF), NIST Cybersecurity Framework (CSF), NIST 800-53 revision 5 and applicable guidance Supporting the system/application assessment and authorization (A&A) effort, to include assessing and guiding the quality and completeness of A&A activities, tasks and resulting artifacts mandated by governing DoD and AF policies, and applicable mandates Collecting, reviewing and verifying documented business processes within process narratives or flowcharts, identifying risks and validating proficiency of mitigating controls Reviewing risk and control matrices and testing plans for key controls and determines effectiveness Identifying control gaps, reviewing and testing the design of existing controls. Formulating clear and concise conclusions on internal controls and business process efficiency Recommending policies and procedures to ensure information systems reliability and accessibility and to prevent and defend against unauthorized access to systems, networks, and data Conducting risk and vulnerability assessments of installed information systems to identify vulnerabilities, risks, and protection needs Reviewing Plans of Actions & Milestones (POA&Ms) Providing recommendations and reports to the Security Control Assessor (SCA), Authorizing Official (AO), Chief Information Security Officer (CISO) Reviewing network and systems design to ensure accuracy Ensuring the rigorous application of information security/cybersecurity policies, principles, and practices in the delivery of all IT services Required Qualifications: 15+ years of relevant Cyber experience 15+ years prior experience as a Security Control Assessor/Representative RMF Engineer, ISSO, ISSM and/or information assurance engineer Cloud Platform experience with at least one service offering from AWS, Azure, or Google GCP Hands-on eMASS and/or Xacta experience completing full system lifecycle activities Experience with Air Force risk management policies/procedures, to include, DODI 8510.01, AFI 17-101 Experience with Cloud Computing Security Requirements Guide (CC SRG) Knowledgeable with DoD DevSecOps Fundamentals Playbook Experience evaluating information security compliance against STIGs Ability to clearly articulate ideas Strong technical writing abilities to author reports for AO and CISO dissemination Exudes confidence in providing briefings, presentations, and in conducting/guiding meetings with senior leadership and stakeholders Ability to use prior experience and knowledge to address new situations Certification requirements (at least one of the following): SecurityX / CASP+, CCISO, CGRC/CAP, CISA, CISM, CISSO, CISSP, CISSP-ISSEP, Cloud+, CySA+, FITSP-A, GCSA, GSEC, GSLC, GSNA, PenTest+, Security+ B.A. or B.S. Information Security, Computer Science or related discipline US Citizenship and currently possess a Top Secret security clearance Desired Qualifications: Experience with Fast Track ATO Handbook & AF Continuous ATO Playbook Familiarity with CI/CD Pipelines DevSecOps experience Sharepoint, JIRA, Confluence familiarity The salary range for this position is $140,000.00 - $145,000.00 commensurate on experience and technical skillset. We are open to considering a variety of levels of experience for these projects and potential for 1099 hourly opportunity. We are proud to be an EEO/AA Employer Minorities/Women/Veterans/Disabled and other protected categories. In compliance with federal law, all persons hired will be required to verify identity, confirm US Citizenship, and complete the required employment eligibility verification upon hire.

Job Description Job Description We are an employee-centric company that truly appreciates our team members and their value to our customers and the missions they support. We pride ourselves on being forward-leaning thinkers and fostering teams that are and continue to be technically proficient and technically capable across a comprehensive range of cyber mission areas. OneZero full-time employees receive an extremely competitive benefits package that includes health/dental/vision/life insurance plans, 401K with company matching, PTO & paid holidays, employee referral program, and educational assistance. Additional details can be found on our website at: Title: DHS Security Control Assessor IIILocation: NCRClearance: TS/SCIOneZero Solutions is on contract to provide division-wide support for Federal Information Security Modernization Act (FISMA) compliance, execution of the Risk Management Framework (RMF) process to achieve and maintain Authority to Operate (ATO) security authorizations, and deliver cyber security compliance for DHS operational mission systems. We are looking for personnel to support our DHS customer in achieving its mission of providing division-wide cyber security support for operational mission systems and assisting programs as they navigate the ATO process. The result of these efforts will be that the systems meet all the requirements for ATO approval before they are officially submitted to the Office of Chief Information Officer (OCIO).Qualified Parking Allowance: Employer may provide a monthly stipend or cover the cost of parking for employees who commute to government site by car.Job SummaryConduct independent assessments of the management, operational, and technical security controls employed within various DHS systems and networks.Evaluate the effectiveness of implemented controls in mitigating identified risks and protecting sensitive data and systems.Identify and document control deficiencies, vulnerabilities, and non-compliance with security policies, regulations, and prescribed hardening guidelines.Develop and present clear and concise findings and recommendations to stakeholders and decision-makers.Support the implementation of corrective actions to address identified deficiencies and improve overall security posture.Stay current with emerging security threats, vulnerabilities, and federal and industry best practices, standards, and policies for employed IT and its continued compliance within DHS.Contribute to the development and continual refinement of internal security assessment methodologies and procedures.Qualifications:10+ years of direct experience serving as a Security Control Assessor (SCA) within the DoD/Federal Government. Experience within the Intelligence Community and Law Enforcement is a strong plus.Demonstrated expertise in various security control frameworks and methodologies, including NIST SP 800-53, FISMA, RMF, DISA STIGs, and DHS supplemental IA controls.Proficiency in conducting security assessments, utilizing tools and techniques for vulnerability scanning, penetration testing, and configuration review.Strong understanding of information security principles and best practices, including network security, system security, encryption, and incident response.Experience with OpenRMF is a strong plus.Excellent analytical and problem-solving skills.Exceptional written and verbal communication skills.Ability to work independently and as part of a team.EducationBachelor 's degree and/or CRISC, GISP, CASP, CISSP, or other advanced security-related certificationsAdditional relevant experience may be considered in lieu of a degree. OneZero Solutions, LLC is an Equal Opportunity/Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, or protected veteran status and will not be discriminated against on the basis of disability.If you are a qualified individual with a disability or a disabled veteran, you have the right to request an accommodation if you are unable or limited in your ability to use or access as a result of your disability.To request an accommodation, please contact us at or call . Job Posted by ApplicantPro

Job Description Job Description Dark Wolf Solutions is seeking a Senior Security Control Assessor Representative (SCAR) to conduct independent comprehensive assessments of the management, operation, and technical security controls and control enhancements employed within, or inherited by, an Information technology (IT) system to determine the overall effectiveness of the controls. The SCAR will perform reviews of security artifacts for system authorizations, assessing both the technical and functional adequacy as required for application and software cybersecurity readiness. The SCAR candidate must have prior experience in authorizing tools/applications, systems, and/or enclaves. Additionally, knowledge of network security, technologies, processes, and practices designed for the prevention of damage to, protection of, and restoration of computers, communications systems, services, and various types of communications technologies. The SCAR candidate must be knowledgeable and proficient in assessing DoD GovCloud environments to include testing controls and validating artifacts. A successful candidate will have a strong foundational understanding of NIST, DOD, and DAF cybersecurity focused guidance. This position can be based out of any Dark Wolf Office location and will be a hybrid schedule. Additional responsibilities include: Key Responsibilities: Evaluating IT infrastructure in terms of risk to the organization and defining artifacts required to meet Federal, DoD and DAF requirements Assessing IT systems and architecture to ensure compliance with the Risk Management Framework (RMF), NIST Cybersecurity Framework (CSF), NIST 800-53 revision 5 and applicable guidance Supporting the system/application assessment and authorization (A&A) effort, to include assessing and guiding the quality and completeness of A&A activities, tasks and resulting artifacts mandated by governing DoD and AF policies, and applicable mandates Collecting, reviewing and verifying documented business processes within process narratives or flowcharts, identifying risks and validating proficiency of mitigating controls Reviewing risk and control matrices and testing plans for key controls and determines effectiveness Identifying control gaps, reviewing and testing the design of existing controls. Formulating clear and concise conclusions on internal controls and business process efficiency Recommending policies and procedures to ensure information systems reliability and accessibility and to prevent and defend against unauthorized access to systems, networks, and data Conducting risk and vulnerability assessments of installed information systems to identify vulnerabilities, risks, and protection needs Reviewing Plans of Actions & Milestones (POA&Ms) Providing recommendations and reports to the Security Control Assessor (SCA), Authorizing Official (AO), Chief Information Security Officer (CISO) Reviewing network and systems design to ensure accuracy Ensuring the rigorous application of information security/cybersecurity policies, principles, and practices in the delivery of all IT services Required Qualifications: 15+ years of relevant Cyber experience 15+ years prior experience as a Security Control Assessor/Representative RMF Engineer, ISSO, ISSM and/or information assurance engineer Cloud Platform experience with at least one service offering from AWS, Azure, or Google GCP Hands-on eMASS and/or Xacta experience completing full system lifecycle activities Experience with Air Force risk management policies/procedures, to include, DODI 8510.01, AFI 17-101 Experience with Cloud Computing Security Requirements Guide (CC SRG) Knowledgeable with DoD DevSecOps Fundamentals Playbook Experience evaluating information security compliance against STIGs Ability to clearly articulate ideas Strong technical writing abilities to author reports for AO and CISO dissemination Exudes confidence in providing briefings, presentations, and in conducting/guiding meetings with senior leadership and stakeholders Ability to use prior experience and knowledge to address new situations Certification requirements (at least one of the following): SecurityX / CASP+, CCISO, CGRC/CAP, CISA, CISM, CISSO, CISSP, CISSP-ISSEP, Cloud+, CySA+, FITSP-A, GCSA, GSEC, GSLC, GSNA, PenTest+, Security+ B.A. or B.S. Information Security, Computer Science or related discipline US Citizenship and currently possess a Top Secret security clearance Desired Qualifications: Experience with Fast Track ATO Handbook & AF Continuous ATO Playbook Familiarity with CI/CD Pipelines DevSecOps experience Sharepoint, JIRA, Confluence familiarity The salary range for this position is $140,000.00 - $145,000.00 commensurate on experience and technical skillset. We are open to considering a variety of levels of experience for these projects and potential for 1099 hourly opportunity. We are proud to be an EEO/AA Employer Minorities/Women/Veterans/Disabled and other protected categories. In compliance with federal law, all persons hired will be required to verify identity, confirm US Citizenship, and complete the required employment eligibility verification upon hire.