Job Description
This role is contingent upon a contract award.
ICF is seeking an experienced Cybersecurity Manager to lead cybersecurity
governance, risk management, compliance coordination, and security integration
for a complex federal technology services program. This role will be responsible
for ensuring cybersecurity requirements are addressed across systems,
applications, integrations, cloud services, product delivery, and operational
support functions.
The ideal candidate has demonstrated experience supporting federal cybersecurity
programs that require RMF alignment, assessment documentation, POA&M management,
contingency planning, vulnerability coordination, cybersecurity reporting, and
integration with engineering and product delivery teams. This role requires
strong knowledge of federal cybersecurity requirements, practical risk
management judgment, and the ability to coordinate across technical, program,
operations, assessor, and client stakeholder groups.
Job Location: This position is remote within the United States.
Please note that ICF monitors employee work locations, restricts access from
foreign locations and IP addresses, and prohibits the use of personal VPN
connections.
WHAT YOU’LL BE DOING
* Lead cybersecurity governance and RMF coordination across a complex federal
technology services environment.
* Develop, maintain, and coordinate cybersecurity assessment documentation,
including FIPS 199 analyses, E-Authentication Risk Assessments, security
control implementation statements, and supporting control artifacts.
* Support system teams, product teams, security assessors, and client
stakeholders in preparing and maintaining cybersecurity evidence and
compliance documentation.
* Evaluate cybersecurity risks associated with new capabilities, including
applications, integrations, plug-ins, software tools, system connections, and
platform changes.
* Track system security deficiencies, remediation activities, and Plans of
Action and Milestones through closure.
* Lead or support development, maintenance, and testing of contingency plans
for systems and services within program scope.
* Develop and maintain cybersecurity governance standard operating procedures,
workflows, templates, and reporting mechanisms.
* Coordinate cybersecurity inputs into engineering, product delivery,
architecture, DevSecOps, cloud, data, and service operations activities.
* Support vulnerability management, incident response coordination, risk
reviews, control evidence collection, and security-related data calls.
* Partner with service operations, identity, device, network, platform, and
application teams to ensure cybersecurity responsibilities are clear and
evidence is maintained.
* Monitor cybersecurity risks, issues, dependencies, and compliance gaps, and
escalate items requiring leadership attention.
* Translate cybersecurity requirements and risks into practical guidance for
technical teams, program leadership, and client stakeholders.
WHAT YOU MUST HAVE
- Bachelor’s Degree
- U.S. Citizenship required due to federal contract requirements.
- Must be able to obtain and maintain a Federal Public Trust clearance.
- 10+ years of experience supporting cybersecurity, information assurance,
security governance, risk management, compliance, or RMF activities in
federal or regulated environments.
* Active CISSP, CISM, CAP, Security+, GSEC, or equivalent cybersecurity
certification.
PREFERRED QUALIFICATIONS
* 7+ years of experience supporting federal cybersecurity requirements,
including FISMA, NIST 800-53, RMF, POA&M management, system assessment, or
authorization activities.
* 5+ years of experience developing or maintaining cybersecurity assessment
documentation, control implementation statements, security plans, contingency
plans, risk assessments, or security artifacts.
* 5+ years of experience coordinating with system owners, security assessors,
engineering teams, product teams, operations teams, or federal cybersecurity
stakeholders.
* 5+ years of experience supporting vulnerability management, incident response
coordination, remediation tracking, control evidence collection, or
cybersecurity reporting.
* 3+ years of experience evaluating cybersecurity risks for new technologies,
applications, integrations, SaaS platforms, cloud services, or system
connections.
* 3+ years of experience supporting cybersecurity governance for cloud, SaaS,
application modernization, DevSecOps, data, or enterprise platform
environments.
* Experience supporting HHS, NIH, FDA, CMS, CDC, or other health-focused
federal environments.
* Experience with Zero Trust, identity and access management, endpoint
security, secure cloud architecture, secure SaaS governance, TIC 3.0, or
continuous monitoring.
* Experience integrating cybersecurity requirements into Agile, DevSecOps,
CI/CD, product delivery, and application modernization workflows.
* Experience supporting ATO packages, security assessment activities, security
control validation, audit responses, and independent verification or
validation reviews.
* Experience with cybersecurity tools and repositories used for POA&M tracking,
vulnerability management, audit evidence, incident coordination, SIEM/SOAR,
or continuous monitoring.
* Experience aligning cybersecurity activities with NIST 800-53 Rev. 5, NIST
800-37, NIST 800-61, NIST 800-34, FedRAMP, FISMA, CISA guidance, or HHS
security policy.
* Experience developing cybersecurity dashboards, executive risk reporting,
compliance scorecards, and metrics-based security governance materials.
* Additional cybersecurity, cloud security, Agile, ITIL, AWS, Azure, Google
Cloud, or project management certification.
Working at ICF
ICF is a global advisory and technology services provider, but we’re not your
typical consultants. We combine unmatched expertise with cutting-edge technology
to help clients solve their most complex challenges, navigate change, and shape
the future.
We can only solve the world's toughest challenges by building a workplace that
allows everyone to thrive. We are an equal opportunity employer. Together, our
employees are empowered to share their expertise and collaborate with others to
achieve personal and professional goals. For more information, please read
our EEO [ policy.
We will consider for employment qualified applicants with arrest and conviction
records.
Reasonable Accommodations are available, including, but not limited to, for
disabled veterans, individuals with disabilities, and individuals with sincerely
held religious beliefs, in all phases of the application and employment process.
To request an accommodation, please email Candidateaccommodation@icf.com
[Candidateaccommodation@icf.com] and we will be happy to assist. All information
you provide will be kept confidential and will be used only to the
extent required to provide needed reasonable accommodations.
Read more about workplace discrimination rights
[ or
our benefit offerings which are included in the Transparency in (Benefits)
Coverage Act. [
Candidate AI Usage Policy
At ICF, we are committed to ensuring a fair interview process for all candidates
based on their own skills and knowledge. As part of this commitment, the use of
artificial intelligence (AI) tools to generate or assist with responses during
interviews (whether in-person or virtual) is not permitted. This policy is in
place to maintain the integrity and authenticity of the interview process.
However, we understand that some candidates may require accommodation that
involves the use of AI. If such an accommodation is needed, candidates are
instructed to contact us in advance at candidateaccommodation@icf.com
[candidateaccommodation@icf.com]. We are dedicated to providing the necessary
support to ensure that all candidates have an equal opportunity to succeed.
Pay Range - There are multiple factors that are considered in determining final
pay for a position, including, but not limited to, relevant work experience,
skills, certifications and competencies that align to the specified role,
geographic location, education and certifications as well as contract provisions
regarding labor categories that are specific to the position.
The pay range for this position based on full-time employment is:
$158,819.00 - $269,993.00
Nationwide Remote Office (US99)
Job Tags
Full time, Contract work, Work experience placement, Work at office, Remote work