NIH - Lead Security Policy / Training Manager

cFocus Software Incorporated

Bethesda, MD(remote)

Apply

JOB DETAILS

JOB TYPE

Full-time

SKILLS

CISA - Certified Information Systems Auditor, CISM - Certified Information Security Manager, CISSP - Certified Information Systems Security Professional, Computer Science, Content Development, Continuous Improvement, Department of Health and Human Services, Documentation, Enterprise Protection, Executive Assistant Skills , FISMA - Federal Information Security Management Act, Federal Government, GSLC - GIAC Security Leadership Certificate, Government Policies, Homeland Security, Information Technology & Information Systems, Information/Data Security (InfoSec), Internet Security, Inventory Management, Leadership, Maintain Compliance, Management Strategy, Metrics, National Institutes of Health (NIH), Online Marketing, Operational Audit, Policy Analysis, Policy Development, Policy Implementation, Position of Public Trust, Process Development, Program Evaluation, Project Management Professional (PMP), Project/Program Management, Publications, Regulatory Requirements, Security Attacks, Security Policy, Source Code/Configuration Management (SCM), Strategic Planning, Training Program, Training/Teaching, U.S. National Institute of Standards and Technology (NIST), Webinar, eLearning

LOCATION

Bethesda, MD

POSTED

2 days ago

cFocus Software seeks a Lead Security Policy / Training Manager to join our program supporting the National Institutes of Health (NIH). This position is fully remote. This position requires a Public Trust or the ability to obtain a public trust clearance.
Qualifications:

Public Trust Clearance
B.S. Computer Science, Information Technology, or a related field
10+ years of experience in information security, cybersecurity governance, compliance, or security program management.
5+ years leading enterprise security policy, governance, or awareness programs.
Experience supporting Federal civilian agencies or other large enterprise organizations.
Experience developing information security policies aligned with Federal cybersecurity requirements.
Experience designing and managing enterprise cybersecurity awareness and training programs.
Experience supporting executive-level governance initiatives.
Preferred certifications: CISSP, CGRC, CISM, CRISC, GSLC, CIPM, CIPP/US, HCISPP, CPTM, CPTD, or PMP

Duties:

Lead the development, review, revision, and maintenance of NIH/OD information security policies, standards, procedures, and governance documentation.
Establish and maintain an enterprise Information Security Policy Management Strategy.
Ensure policy documentation remains aligned with NIH, HHS, OMB, DHS, NIST, FISMA, Executive Orders, and other Federal cybersecurity requirements.
Develop governance processes for policy lifecycle management, approval, publication, version control, and annual review.
Maintain the inventory of all NIH/OD information security policies and supporting documentation.
Coordinate policy reviews with Government stakeholders and technical subject matter experts.
Monitor emerging Federal cybersecurity legislation, Executive Orders, OMB memoranda, NIST Special Publications, HHS directives, CISA guidance, and other regulatory requirements.
Analyze the operational impact of new cybersecurity policies affecting NIH/OD.
Identify compliance gaps and recommend implementation strategies.
Prepare formal policy analysis reports for NIH leadership.
Brief executive leadership on regulatory changes and implementation priorities.
Support strategic planning for future policy adoption.
Lead and manage the NIH/OD Information Security Awareness Program.
Develop annual security awareness strategies and implementation plans.
Design awareness campaigns addressing current cyber threats and user risks.
Promote a culture of cybersecurity throughout the NIH organization.
Measure program effectiveness through metrics and user participation.
Develop continuous improvement initiatives for security awareness.
Design, develop, coordinate, and oversee enterprise cybersecurity training programs.
Develop role-based security training for technical and non-technical personnel.
Coordinate instructor-led training sessions, webinars, workshops, and awareness events.
Develop online learning content supporting NIH security objectives.
Ensure mandatory cybersecurity awareness training meets Federal requirements.
Evaluate training effectiveness through assessments and feedback.

NIH - Lead Security Policy / Training Manager

cFocus Software Incorporated

Bethesda, MD(remote)

About the Company

cFocus Software Incorporated

Similar Job Searches