Lead the technical execution and oversight of an enterprise-scale Information Security as a Service (ISaaS) program supporting DOJ, serving as the primary technical authority for authorization, compliance, and security operations across a complex federal environment.
What you'll do
- Provide overall technical leadership and direction to ISaaS teams (ISSOs, ISSEs, ISSRs) and serve as the primary technical point of contact for DOJ, OCIO, and Authorizing Officials
- Manage one or more programs with accountability for schedule, cost, scope, and performance metrics; oversee subcontractor execution and program financial forecasting
- Apply NIST RMF to manage authorization activities, continuous monitoring, and incident response; ensure timely ATOs and sustained audit readiness across the system portfolio
- Develop and implement Quality Assurance programs, establish standard operating procedures in collaboration with Government personnel, and drive continuous improvement through metrics and lessons learned
- Lead recruiting, hiring, onboarding, and supervision of ISaaS personnel; assign staff based on risk, complexity, and workload; provide technical direction and mentorship
- Assess cybersecurity risks and threats; evaluate system and network security programs to inform ISaaS strategy and best practices deployment
Mission
This role supports the Department of Justice's Information Security as a Service program under the OCIO and ISRMU, managing authorization and continuous monitoring activities across multiple DOJ systems at varying maturity levels. The position interfaces directly with senior Government stakeholders and requires deep expertise in federal compliance frameworks, risk management, and cybersecurity operations.
Required skills
- NIST Risk Management Framework (RMF)
- Authority to Operate (ATO) management
- FISMA compliance
- Enterprise cybersecurity program leadership
- ISSO/ISSE service delivery
- Federal authorization processes
- Program and budget management
- Stakeholder engagement with Government agencies
- Risk assessment and threat evaluation
- Quality assurance and process improvement