Senior Cybersecurity Engineer - Compliance and Risk Management

Human Resources Research Organization • Alexandria, VA • 13h ago

The Human Resources Research Organization (HumRRO)is a non-profit leader in developing high-impact services and products in the arenas of employment, military, student testing, and professional credentialing and licensure. We work with federal and state government agencies, private sector organizations, and professional associations.

About the Organization

As a non-profit, HumRRO is dedicated to work that contributes to science and society. Our employees enjoy a highly collaborative and supportive environment that fosters innovation, ethical practice, and outstanding customer service. Our core operational staff includes Industrial-Organizational Psychologists, Educational Researchers, and Behavioral Science Consultants. We are committed to supporting a diverse workforce and to practicing equity and inclusion for all staff.

About the Job

We are seeking a Senior Cybersecurity Engineer to lead our enterprise compliance and security programs across federal, state, and private sector engagements. This role manages multiple compliance frameworks including CMMC, FedRAMP, SCRM, NIST 800-171/53, and ISO 27001:2022 regulatory requirements. You will work on compliance standards across hybrid cloud environments while leading a team of junior engineers conducting vulnerability assessments and security scanning operations. A significant portion of this role involves creating security documentation, developing compliance policies, responding to time-critical security requirements from clients, and managing third-party compliance audits.

As a Senior Cybersecurity Engineer, you will:

Lead enterprise cybersecurity compliance programs (CMMC, FedRAMP, SCRM, NIST frameworks, ISO 27001:2022)

Manage monthly compliance reporting and KPI dashboards for executive leadership

Coordinate third-party compliance audits (NIST 800-171, CMMC, ISO 27001, FedRAMP) and remediation activities

Maintain compliance evidence catalogs and SaaS compliance implementation controls

Evaluate and implement security controls across software applications and cloud platforms AWS, Azure, and Office 365

Oversee Risk Management Framework (RMF) processes for government contract organizations as well as applications in the DoD space (ATO/IATT/IATO documentation)

Conduct weekly Plan of Action and Milestone (POAandM) reviews and monthly security assessments

Develop and maintain security policies, procedures, and technical standards

Lead vulnerability management programs and conduct security assessments and penetration testing coordination

Manage business continuity of operations (COOP) program including disaster recovery and crisis management plans

Lead incident response and security event investigation

Mentor and manage junior cybersecurity engineers and analysts

Interface with federal agencies, auditors, and compliance assessors

Work with system architects for security requirements on existing cloud workloads, cloud migrations and/or hybrid environments

Facilitate and oversee completion of all customers' cyber security questionnaires and qualifications with time-critical deadlines

Coordinate with HumRRO Contracts Division on written responses to RFPs regarding IT security, controls, data privacy and regulatory compliance

Assist with implementation and administration of cybersecurity supply chain risk management (C-SCRM) program

Develop compliance documentation and security narratives for proposals

Support business development with technical security expertise

Serve as subject matter expert on internal security controls and regulations

Minimum Requirements:

US Citizen with ability to obtain/maintain security clearance

Work on-site at Alexandria VA (Up to 2 remote days possible after probation period)

Bachelor's degree in Cybersecurity, Computer Science, or equivalent field. Work experience may be considered in lieu of degree

7+ years of cybersecurity engineering and compliance experience

5+ years of enterprise experience managing Risk and Compliance efforts including multiple regulatory and standard security frameworks

Existing Security+ certification or the ability to obtain within 6 months (CISSP, CCSP, or CISM preferred)

Deep expertise in NIST 800-171, 800-53, RMF, and DoD compliance frameworks

Hands-on experience with CMMC and FedRAMP authorization processes

Proficie

Similar Jobs

Customer Service Representative

U-Haul • Lorton, VA • 2h ago

Management & Administrative

Location: 8207 Terminal Rd, Lorton, Virginia 22079 United States of America Are you a people person? Do you love helping others? U-Haul is in search of friendly, motivated people for the position of Customer Service Repr...

2h ago

Go to Apply

Customer Service Representative

U-Haul • Lorton, VA • 2h ago

Management & Administrative

2h ago

Go to Apply

Principal Sales Consultant

Oracle • Washington, DC • 3h ago

Management & Administrative

Job Description Build and maintain expert-level knowledge of Oracle Cloud Supply Chain Execution (SCE) functionality (Inventory, Maintenance, Manufacturing) and the related underlying architecture. Keep up to date with t...

3h ago

Go to Apply

Customer Service Representative

U-Haul • Lorton, VA • 3h ago

Management & Administrative

3h ago

Go to Apply

Customer Service Representative

U-Haul • Lorton, VA • 3h ago

Management & Administrative

3h ago

Go to Apply

Principal Sales Consultant

Oracle • Washington, DC • 3h ago

Management & Administrative

3h ago

Go to Apply

Principal Sales Consultant

Oracle • Washington, DC • 3h ago

Management & Administrative

3h ago

Go to Apply

Global OGC Technology and IP Senior Manager

PwC • Washington, DC • 4h ago

Management & Administrative

Specialty/Competency: IFS - Office of General Counsel (OGC) Industry/Sector: Not Applicable Time Type: Full time Travel Requirements: Up to 20% At PwC, our people in legal services offer comprehensive legal solutions and...

4h ago

Go to Apply

Administrative Assistant III

Fairfax County Sheriff's Office • Fairfax, VA • 4h ago

Management & Administrative

Administrative Assistant III Print ( https://www.governmentjobs.com/careers/fairfaxcounty/jobs/newprint/5005473 ) Apply ? Administrative Assistant III Salary $45,255.39 - $75,424.96 Annually Location FAIRFAX (FJ56), VA J...

4h ago

Go to Apply

Human Services Assistant

Fairfax County Sheriff's Office • Fairfax, VA • 4h ago

Management & Administrative

Human Services Assistant Print ( https://www.governmentjobs.com/careers/fairfaxcounty/jobs/newprint/5005542 ) Apply ? Human Services Assistant Salary $45,255.39 - $75,424.96 Annually Location ANNANDALE VA 22003 (KH17), V...

4h ago

Go to Apply

Subscribe to get new jobs sent directly to you
(no charge, cancel anytime)

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.