NorthHill Technology Resources has an urgent need for an Information Assurance Lead to support a Navy Program in Arlington, VA.  This is a direct-hire role with our client, a fast-growing Federal Integrator.  US Citizenship and an active Secret Clearance is required.

Cybersecurity / Information Assurance (IA) Lead

Location: Arlington, VA
Work Status: 100% Onsite
Clearance Required: Secret or Higher

Position Overview

The Cybersecurity / Information Assurance (IA) Lead is responsible for leading a small cybersecurity team while ensuring full compliance with DoD cybersecurity and Risk Management Framework (RMF) regulations. This role oversees the implementation, assessment, and continuous enhancement of the organization’s security posture across enterprise systems and programs. The Cybersecurity / IA Lead provides technical leadership in risk identification, mitigation strategies, security documentation, and authorization and accreditation activities.

The ideal candidate is a proactive, detail-oriented leader who drives continuous improvement and fosters a culture of security excellence, accountability, and compliance.

Required Education & Certifications

• Bachelor’s degree in Information Assurance, Cybersecurity, Computer Science, or a related field

• Active IAM Level II Certification, including one or more of the following:

  • CGRC

  • CASP+

  • CISM

  • CISSP

  • GSLC

  • CCISO

  • HCISPP

Required Clearance

• Active Secret Clearance or higher

Required Experience

• Minimum of ten (10) years of experience in an Information Assurance role, ideally as an ISSE or ISSM

• At least three (3) years of experience managing technical staff

• Experience with Information Assurance guidance from various DoD and NIST instructions to support implementation and decision-making

• Experience performing security testing and evaluations (certification and accreditation testing), including developing plans and procedures to implement a secure cyber environment

Key Responsibilities

• Provide full analysis of the enterprise security posture, including:

  • Enterprise vulnerability remediation

  • Building and maintaining ATO packages

  • Analysis of RMF security controls

  • Implementation of IA security guidelines and policy

  • Leveraging SIEM tools for endpoint analysis

  • Intrusion Detection Systems (IDS) and event management

  • Implementing and leveraging a Zero Trust framework

• Conduct regular assessments of the organization’s security posture, identifying vulnerabilities and recommending remediation strategies

• Oversee the design, implementation, and maintenance of cybersecurity measures, including:

  • Network security

  • Endpoint protection

  • Intrusion detection and prevention systems

  • Security incident response procedures

• Act as a cybersecurity subject matter expert (SME), providing guidance and support to internal stakeholders and external clients

• Lead security incident and breach response efforts, including investigations, coordinated response actions, and implementation of preventative controls

• Provide oversight for security testing and evaluations, RMF security certification, and accreditation of systems, networks, and sites