Role Summary
Serves as the technical authority for cybersecurity audit enablement, NIST CSF interpretation, and enterprise risk evaluation.
Provides deep technical expertise to support OIG audit teams.
Key Responsibilities:
- Provide expert guidance on cybersecurity controls, risks, and technical evidence.
- Support interpretation and application of NIST CSF and Rule 60GG-2, F.A.C.
- Assist auditors with technical questions during audit planning and execution.
- Support gap analysis, control assessment, evidence evaluation, and cybersecurity compliance reviews.
- Develop technical training and guidance materials.
- Translate complex cybersecurity issues into practical recommendations for auditors and senior leadership.
Minimum/Preferred Qualifications:
- 10+ years of relevant government cybersecurity, audit, compliance, assessment, IV&V, or control-testing experience.
- Strong NIST CSF and cybersecurity controls experience.
- Experience working with sensitive/restricted government information.
- CISSP, CISA, CEH, Security+ or comparable certification preferred/required as applicable.
- Demonstrated ability to provide evidence-based recommendations to executive leadership.
Educational Qualification
- Bachelor s degree in Cybersecurity, Computer Science, Information Technology, or related field.
- Advanced degree preferred.
Mandatory Certifications
- CISSP
- CEH
- CISA
- Security+
- or similar.