Cybersecurity Manager

MAG is seeking an experienced and innovative Cybersecurity leader to collaborate with peers and stakeholders and lead your team of cybersecurity professionals to ensure optimal delivery and support for cybersecurity operations; governance, risk, and compliance; and overall risk management.

Duties include, but not limited to:

• Providing functional and technical expertise to your team and colleagues, enabling security-minded, practical decisions and operations at speed.
• Ensuring MAG’s information systems can meet/maintain compliance objectives, including CMMC 2.0 certification.
• Leading & supervising the development and deployment of program information security for all program systems to meet the program and enterprise requirements, policies, standards, guidelines, and procedures.
• Managing internal and external SOC resources (3rd parties and partners) to maintain and enforce threat awareness, monitoring, reporting, and overall awareness.
• Developing, monitoring, and maintaining cybersecurity KPIs to demonstrate appropriate/value-added management of threats, risk, and compliance related processes, and be able to lead change and capitalize on improvement efforts when the opportunity arises.
• Working together with Engineering and Operations teams to implement technology, processes, and solutions to secure data, systems, and the users supporting our mission.
• Planning, managing, and optimizing your budget to keep tools, solutions, and spend optimized for maximum effectiveness and value (i.e., supplier/vendor management).
• Developing and presenting information and beneficial briefings, communications, and presentations to varied audiences (users, cybersecurity colleagues, and leadership) including assessments, operational reviews, training and awareness.
• Creating a world-class organization by developing the skills and abilities of your team through coaching, performance management, and inspiring others’ passion.
• Developing and contributing towards key strategic roadmaps, objectives, and key results.

Minimum Requirements

• Six or more years’ experience in various technical and cybersecurity roles (including but not limited to operations, engineering, analysis, or testing/assurance)
• 2 or more years’ experience as a leader (including managing personnel, strategy, operations, and budget).
• Experience implementing, supporting, and leading assessments based on regulatory and governmental control frameworks, including CMMC, NIST SP 800-171/53, and ISO.
• Advanced Security certification, verifiable (e.g., CASP, CISSP, CEH, CCSP, SC-100).
• Project management: Demonstrated ability to assume varied project roles to devise, lead, manage, influence, and contribute to simultaneous projects and initiatives effectively. Experience working in Agile/DevSecOps environments/roles a plus.
• Direct experience performing self-assessments, passing external assessments (e.g., DCSA audits, C3PAO engagements), and/or experience managing continuous monitoring technologies/information assurance teams. Experience performing certified audits/assessments and granting accreditation a plus.
• Experience providing information security and compliance knowledge and capability in support of Cloud (SaaS/PaaS) is required.
• Deep understanding of security-related technologies including network security (e.g., firewalls, SDWAN/SASE, IPSec), identity and access management (e.g., Active Directory, conditional access), endpoint management, and business continuity/data protection. Career history in adjacent technical domains including networking, infrastructure management, information assurance, or technical support a plus.
• Experience building, leading, and developing world-class teams of professionals who are empowered, inspired, and united to meet current and emerging industry and business demands.
• Excellent communication (written and oral) and customer service skills and ability to collaborate with business stakeholders, solution teams, and others to plan and achieve outcomes.

Education / Certifications

• University degree in cybersecurity, Computer Science, or a related subject. (Experience in lieu of degree will be considered.)

Clearance

• Must have the ability to obtain and maintain an active Top Secret Clearance

Preferred Requirements

• Experience with Microsoft Azure and M365 services.
• Technical certifications in related areas (e.g., ITIL, AWS/Azure, CCNP).

The position is contingent upon candidate’s ability to meet physical and medical requirements as needed by the position; including compliance with all applicable federal, state, and local jurisdictional requirements.

Government or customer site-specific requirements may include, but are not limited to, proof of full COVID-19 vaccination status, except in circumstances where a candidate is legally entitled to an accommodation.