Description

🛡️ Business Cyber Capabilities

Cyber Risk Management & Compliance

• Lead cybersecurity initiatives aligned with NIST, FedRAMP, and agency-specific frameworks

• Ensure compliance with federal regulations across government contracts and IT portfolios

• Assess vendor and system compliance through security audits and risk reviews

IT Infrastructure Security

• Manage secure environments across Azure, AWS, Exchange Server, and Active Directory

• Implement and monitor SSO, Okta, and LDAP for secure access control

• Oversee endpoint and identity management policies for distributed teams

Security Testing & QA Integration

• Use Postman, Selenium, and Nessus for automated testing and vulnerability scanning

• Integrate security testing in QA workflows to ensure early detection of flaws

• Apply DevSecOps principles to align cybersecurity with continuous delivery

Incident Response & Business Continuity

• Contribute to response plans ensuring resilience in the face of breaches or outages

• Align IT operations with business continuity and disaster recovery goals

• Evaluate impact on P&L and operational KPIs following cyber events

AI Security & Governance

• Design AI governance frameworks that include ethical use, data protection, and accountability

• Evaluate risks related to LLMs, APIs, and low-code/no-code tools in business processes

• Develop safeguards for automated decision-making and data-sensitive workflows

Cyber-Aware Culture & Change Leadership

• Drive organization-wide awareness of cybersecurity as a shared responsibility

• Embed secure practices into change management and digital transformation programs

• Facilitate staff training and engagement around cyber hygiene and data protection

Third-Party & API Security Oversight

• Assess external integrations for potential security exposures

• Define access protocols and usage boundaries for public and partner APIs

• Establish monitoring tools to track data flow and detect anomalies

Strategic Alignment & Executive Reporting

• Translate complex cyber issues into business terms for executive and stakeholder briefings

• Use Power BI and Tableau to visualize threat data and action plans

• Align security strategy with broader digital modernization and innovation objectives