Senior Information Security Consultant (Federal)
|Published||May 24, 2023|
Sr. Information Security Consultant - Federal TeamAbout The RoleTevora is seeking a highly specialized Consultant for our Federal practice. Who are you? You are an Information Security Management Systems fanatic. Risk is a concept that fascinates you and drives your creativity in the Information Security space. As a thought leader in this space, we are looking for people who can bring the right amount of novel ideas to the table to ensure companies can go forward confidently.About UsTevora Business Solutions is a leader in IT security consulting with a focus on Compliance, Risk Management, Threat Management and Technology solutions. We primarily serve Enterprise/Fortune 1000 customers.Duties and ResponsibilitiesActively lead the execution of compliance assessments, audits, gap analyses, and remediation projects in the areas of FedRAMP, NIST 800-53/FISMA, DFARS NIST 800-171Lead FedRAMP preparation and assessment servicesCommunicating with project stakeholders to effectively convey requirements of technical and process improvements.Assist in leadership duties to the Federal program through process reviews and making recommendations for process improvement.Support Federal program development by providing recommendations for other Federal team members on research, training, and mentorship goals.Working knowledge of: NIST 800 series documents including special publications 800-30, 800-37, 800-53, 800-60, 800-171. Understanding of FIPS 199/200Security architecture, infrastructure, network and systems design.Security policy frameworks and control design. Work closely with Tevora's Project Management Office to ensure project goals are met.Support Tevora's annual FedRAMP certification renewal process against the ISO 17020 framework.Additional duties as assigned.Qualifications:The candidate shall have a Certified Information System Security Professional (CISSP), and have at least one other industry certification from the following list: CompTIA Advanced Security Practitioner (CASP+) Continuing Education (CE) GIAC Certified Enterprise Defender (GCED) GIAC Certified Incident Handler (GCIH) GIAC Security Leadership (GSLC) Certified Information Systems Auditor (CISA) Certified Information Security Manager (CISM) Certified Cloud Security Professional (CCSP) CISSP-Information Systems Security Architecture Professional (CISSP-ISSAP) CISSP-Information Systems Security Engineering Professional (CISSP-ISSEP) CISSP-Information Systems Security Management Professional (CISSP-ISSMP) CyberSec First Responder (CFR) Certified Chief Information Security Officer (CCISO) Bachelor's Degree from an accredited 4-year universityMinimum 4 years of experience in the information security or compliance field.Prior qualification through FedRAMP's Baltimore Cyber Range certificationAdditional Qualifications:Valid driver's license as driving may be required as this role may have occasional travel to client sitesEligible to work in the United StatesBenefits:Comprehensive Healthcare Benefits401k w/ Employer Matching Hybrid FlexibilityPaid VacationsPaid HolidayVibrant Work CultureTevora is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, national origin, age, protected veteran status, or disability status.