Cybersecurity Consultant II Job at Wright Way Enterprises in Washington

Job Description

About TWW

The Wright Way Enterprises (TWW) is certified as an SBA 8(a) and HUBZone minority-owned, small business, stewarding organizations in addressing the dynamic needs of an ever-changing global economy. Founded in 2020, TWW’s comprehensive capabilities fortify federal and private infrastructure. The impact-driven consultancy specializes in program management, auditing, cyber risk management, environmental consulting, and compliance. TWW’s vision is to be globally trusted advisors in delivering robust solutions that protect data, preserve vital resources, ensure compliance, and optimize operations for excellence.

What We Stand On

TWW Enterprises is astute in our belief that a workplace should be a safe place for all employees to thrive, grow, and position themselves to accomplish their career goals. Our firm is co-led by a mother-son team, who is focused on both TWW’s business success and its staff members’ well-being. We hold integrity, innovation, quality and excellence, success and thrivability, and employee conscious operations as our core values. We strive to have a diverse workplace that includes a multitude of perspectives that help our people, firm, and clients thrive.

What We Seek

TWW is seeking motivated candidates ready to join our team as a Cybersecurity Consultant Level II. Ideal candidates for this position have the desired skills listed below but are also collaborative, problem-solving, and communicative. On our team, we want enthusiastic people that are learners at their core and always seeking ways to improve and get better. At TWW, you will be seen, heard, and respected.

You In This Position

In this role, you will work on a team of cybersecurity professionals providing program management and risk mitigation services to our federal clients. More specifically, your team will support the management and implementation of ATO processes and authorization protocols. Additionally, this position will support the advisement and management of solutions specific to cybersecurity policy, processes, procedures, systems infrastructure, application security, data protection, and strategy. You can expect for your work to touch various cybersecurity standards and frameworks such as NIST, FISMA, and HIPAA, and to entail vulnerability mitigation, and continuous monitoring and incident response.

Functional Responsibilities

1. Provide clients with cybersecurity and IT enhancement strategies.
2. Produce and present reports, findings and documentation, analyze research, build and test models, and support new client engagement strategies.
3. Provide process improvement strategies, operations management, financial management, schedule management, risk analysis, and are responsible for the completion of all aspects of project deliverables.
4. Supervise engagement teams and be responsible for on-site quality control and complete project execution.
5. Provide governance, risk, and compliance support to clients.
6. Identify weaknesses, deficiencies, and vulnerabilities in IT and business programs, projects, and systems.
7. Coordinate, develop, and evaluate security programs.
8. Apply technical knowledge to help create dashboards, presentations, recommendation papers, and other materials to positively influence client delivery efforts.
9. Execute processes and procedures for protecting PII.
10. Establish and satisfy information assurance and security requirements based upon analysis of user, policy, regulatory, and resource demands.
11. Create, develop, and maintain cybersecurity policies, procedures, and guidelines.
12. Conduct security audits, assessments, and reviews to ensure compliance with applicable security policies, standards, laws, and regulations.
13. Evaluate existing and emerging technologies and recommend innovative approaches to solve business problems impacting IT.
14. Perform vulnerability/risk analysis of computer systems and applications during all phases of the system development life cycle.
15. Demonstrate a detailed ability to understand findings, vulnerabilities, and deficiencies, and prepare a POA&M.
16. Create and manage risk registers, track milestones, and document corrective actions.
17. Perform root cause analysis and propose risk-based conclusions.
18. Prepare and present written communications, plans, reports, briefings, and capture metrics.
19. Prepare and conduct briefings for leadership (managers, directors, and executives).
20. Communicate adverse and contrasting risk and IT information with technical and non-technical teams.

Minimum Qualifications

A bachelor’s degree and three (3) years of experience in cybersecurity or IT or a High School diploma and six (6) years of experience in cybersecurity or IT.

Practical knowledge of FISMA and application of NIST 800-53 controls.

Expertise in implementing the RMF and CSF.

Preferred Qualifications

MS degree in related field.

PMP certification.

Desired Skills

1. Experience utilizing Splunk and Tableau.
2. Ability to develop dynamic presentation decks.
3. Knowledge of office management systems and procedures.
4. MS Office and Project proficiency.
5. Outstanding organizational and time management skills.
6. Ability to multi-task and prioritize daily workload.
7. Excellent verbal and written communication skills, with the ability to speak clearly and effectively with customers and technical personnel in a variety of situations.
8. Skilled writing ability.
9. Pristine attention to detail.
10. Sharp problem-solving skills.
11. Thoughtful relationship manager and builder.
12. Valuable interpersonal skills.
13. Strong ability to work collaboratively and independently.
14. Solution-oriented mind-set with ability to make quick assessments and identify best course of action.

Compensation and Benefits

$95k - $120k (based on experience).

Health, Dental, Vision, STD, LTD, Life.

Work Requirements

1. Must be a U.S. Citizen.
2. Must have or be able to obtain a security clearance.
3. Must be able to pass a favorable federal tax check.
4. Industry recognized certification (Security+ or similar).
5. Federal sector experience.

Location

Remote (limited travel may be required).

To Apply

Send resume and cover letter to careers@twwenterprises.com with the subject line “Cybersecurity Consultant II Career Application”.

Prior to interviewing you we would like to get to know you. Some of the things you should address in your cover letter are:

1. Who you are and what you are passionate about.
2. Why you would like to work with our firm.
3. What makes you interested in cybersecurity.
4. What are your long-term career and professional goals.
5. How your work/education experience is applicable to this position description.

Deadline

Applications for this position are due by October 7, 2024.