IT Security

IT Security Engineer

Location: 100% Remote, East Coast (close to major airport hub for ease of travel)

Duration: 6-12 months C2H with possible extension

MoI: 2 Video

Qualifications: Knowledge/Experience/Certifications:

• Required / Preferable: Knowledge of USG CUI Program, CMMC framework, NIST SP 800-171, FAR 52.204-21, DFARS View phone number on click.appcast.io, and DFARS View phone number on click.appcast.io.
• Preferable: Familiarity with USG ECI rules.
• Preferable: Experience managing compliance, IT security, or USG related projects.
• Preferable Certifications: CMMC Registered Practitioner (RP) or Certified CMMC Professional (CCP)

Responsibilities: Roles & Deliverables

• Project Planning and Execution
• Develop and manage project plans to achieve CUI and ECI compliance across IT infrastructure and operations.
• Define scope, schedule, milestones, deliverables, and resource needs.
• Align project goals with US Government requirements and internal strategic objectives.
• CUI and ECI Assessment, Readiness and Implementation
• Coordinate remediation activities and improvements to organizational compliance programs.
• Ensure the development, maintenance, and enforcement of necessary security documents, including System Security Plans.
• Stakeholder Coordination
• Achieving compliance requires close collaboration and coordinated efforts across a diverse range of teams and business units.
• Collaborate with cybersecurity, IT, legal, procurement, HR, and executive teams to align responsibilities.
• Serve as the primary point of contact between internal teams and external assessors.
• Facilitate communication between project sponsors and technical teams.
• Documentation and Audit Readiness
• Maintain strong organization and thorough documentation.
• Ensure all necessary compliance artifacts, evidence, and documentation are current and auditable.
• Maintain a compliance document repository (e.g., SSPs, incident response plans, access control logs).
• Oversee regular reviews, updates, and submission of required compliance documentation.
• Budget and Resource Management
• Estimate and manage project budgets, including tools, consultants, and assessment costs.
• Secure necessary resources, both internal and external, for successful project execution.
• Training and Awareness
• Coordinate CMMC and other cybersecurity training programs for technical and non-technical personnel.
• Promote cybersecurity awareness and proper handling of Controlled Unclassified Information (CUI) and ECI.