Our client, a federal contractor is seeking a Senior official or executive with the authority to formally assume responsibility for operating an information system at an acceptable level of risk to organizational operations (including mission, functions, image, or reputation), organizational assets, individuals, other organizations, and the Nation (CNSSI 4009).

The position is 100% onsite at the government facility in St. Louis, MO. Our client is looking to onboard as a direct employee.

Position responsibilities shall include, but are not limited to:

- Manage and approve Accreditation Packages (e.g., ISO/IEC 15026-2).
- Review authorization and assurance documents to confirm that the level of risk is within acceptable limits for each software application, system, and network.
- Establish acceptable limits for the software application, network, or system
- Manage Accreditation Packages (e.g., ISO/IEC 15026-2).
- Assess and forecast manpower requirements to meet organizational
objectives.
- Develop policy, plans, and strategy in compliance with laws, regulations, policies, and standards in support of organizational cyber activities.
- Coordinate cyber operations with other organization functions or support
activities.
- Identify external partners with common cyber operations interests.
- Interpret and apply laws, regulations, policies, and guidance relevant to organization cyber objectives.
- Work across departments and business units to implement organization-s
privacy principles and programs and align privacy objectives with security objectives.
- Relate strategy, business, and technology in the context of organizational
dynamics.
- Identify critical infrastructure systems with information communication
technology that were designed without system security considerations.

Required Skills

- Must be US Citizen due to government clearance requirement
- Active TS/SCI Clearance
- Bachelor-s degree or higher from an accredited college or university. (Prefer an accredited Computer Science, Cyber Security, Information Technology, Software Engineering, Information Systems, or Computer Engineering degree, or a degree in a Mathematics or Engineering field.
- CCISO or CISM or CISSP-ISSEP or CISSP-ISSMP Certification
- Ability apply cybersecurity and privacy principles to organizational requirements (relevant to confidentiality, integrity, availability, authentication, non-repudiation).
- Ability to understand the basic concepts and issues related to cyber and its organizational impact.
- Ability to understand technology, management, and leadership issues related to organization processes and problem solving.