Source Job

• Lead the organization’s cybersecurity strategy, governance, and operational security programs.
• Protect company systems, networks, and data by developing security policies and managing risk.
• Oversee security operations and lead incident response efforts.

Lightcast is a global leader in labor market insights with headquarters in Moscow, ID (US) and offices in the United Kingdom, Europe, and India. They drive economic prosperity and mobility by providing insights to build and develop people, institutions, companies, and communities.

• Manage and develop staff members under Product Compliance.
• Oversee and contribute to the vulnerability management lifecycle.
• Assess and serve as a subject matter expert for regulatory and compliance requirements.

ExtraHop is a company that focuses on network detection and response (NDR) to help organizations stay ahead of emerging threats. They integrate network threat detection, network performance management, intrusion detection, and packet forensics into a single console.

• Apply the Risk Management Framework (RMF) to support system authorization activities.
• Develop and maintain RMF artifacts and coordinate with stakeholders to ensure systems meet security compliance requirements.
• Support the design, implementation, and maintenance of secure cloud architectures.

EXPANSIA delivers high-impact technologies, technology-enabled services and advanced manufacturing solutions to the U.S. Department of Defense and related national security customers. They operate as a multi-entity aerospace and defense technology and tech-enabled services and manufacturing enterprise positioned for scalable growth, operational excellence, and long-term value creation.

• Manages the 2ROPS accreditation process for small classified mobile systems.
• Renews the current Authority to Operate (ATO).
• Provides ongoing cybersecurity sustainment support.

GovCIO transforms government IT with innovative services and solutions. We are a team of passionate people making a positive impact. We are changing the face of government IT and building a workforce that fuels this mission.

• Conduct structured interviews with partner organizations, operational teams, and technical stakeholders.
• Documents end‑to‑end operational workflows and surface implicit, non‑documented practices.
• Identify workflow fragility zones, handoff risks, and transition‑period vulnerabilities.

Element serves as a partner at the intersection of innovation and our clients' needs, efficiently crafting meaningful user experiences for government and commercial customers. Our talented professionals bring unparalleled energy engagement, setting a higher standard for impactful work.

• Support ongoing FedRAMP authorization including SSP, POA&M, evidence, and 3PAO coordination.
• Manage and oversee NIST SP 800-53 compliance.
• Oversee continuous monitoring, vulnerabilities, incidents.

IFS is a billion-dollar revenue company with 7000+ employees on all continents. Their leading AI technology is the backbone of their award-winning enterprise software solutions, enabling customers to be their best when it really matters–at the Moment of Service™.

• Subject matter expert for Certification and Accreditation (C&A) and NIST Risk Management Framework (RMF) standards.
• Independently manages and resolves cloud computing security risks, implementing "best practices".
• Well-versed in FedRAMP assessment methodology within cloud information systems.

Electrosoft Services, Inc. provides comprehensive technology-based solutions and services to federal customers, specializing in cybersecurity, ICAM, enterprise IT modernization, and software solutions. They are an award-winning company that retains highly qualified employees and offers meaningful work, growth opportunities, and work-life balance.

• Provides senior-level oversight and strategic direction for the planning, coordination, and execution of IT systems and engineering initiatives.
• Responsible for managing complex information systems programs, aligning technology investments to agency mission objectives.
• Accountable for resource allocation, risk identification and mitigation, and the quality of technical and programmatic deliverables.

DMI is a leading provider of digital services and technology solutions, headquartered in Tysons Corner, VA. With a focus on end-to-end managed IT services, DMI supports public sector agencies and commercial enterprises around the globe and is committed to delivering secure, efficient, and cost-effective solutions that drive measurable results. DMI values employees for their talents and contributions and takes pride in helping customers achieve their goals.

• Provide authoritative guidance on complex enterprise architecture decisions.
• Provide technical review and approval authority for major system designs.
• Apply expertise across the full breadth of TSA’s IT domains.

DMI is a leading provider of digital services and technology solutions, headquartered in Tysons Corner, VA. With a focus on end-to-end managed IT services, DMI supports public sector agencies and commercial enterprises around the globe.

• Performs detailed architecture and technical design reviews on the full stack for vendor solutions.
• Conducts architecture reviews of Cloud Service Providers (CSPs) authorization packages to validate the secure design, alignment to FedRAMP and agency requirements.
• Completes comprehensive review and comments on documents of CSPs FedRAMP documentation, including but not limited to system security plans, policies and procedures.

Abile Group partners with the Intelligence Community and their Contractors in Enterprise Analytics & Performance Management, IT & Systems Engineering and Program & Project Management. They are an EDWOSB dedicated to their employees and clients, looking for high performing employees who enjoy providing advice and guidance.

• Serve as the central point of contact for the Government’s Contracting Officer.
• Lead overall contract governance, risk management, staffing oversight, and performance execution.
• Ensure compliance with government regulatory cybersecurity requirements.

Electrosoft Services, Inc. provides technology-based solutions and services to federal customers. They focus on cybersecurity, ICAM, enterprise IT modernization, and software solutions and retain qualified employees while offering meaningful work, growth opportunities, and work-life balance.

• Partner with organizations of all sizes and industries
• Evaluate IT and security controls for compliance and effectiveness
• Advise on security + privacy requirements (state & federal)

Clark Schaefer Hackett provides customized solutions leveraging strategic skills, financial and operational leadership, and technological advances. They are an elite community that includes trusted advisors with Clark Schaefer Hackett, Clark Schaefer Consulting, and Clark Schaefer Strategic HR.

• Own and operate the end-to-end enterprise cybersecurity program, including strategy, architecture, operations, governance, and compliance.
• Establish a multi-year security roadmap aligned with business priorities, technology evolution, and regulatory requirements.
• Define and execute a strategy for AI-assisted cybersecurity operations, leveraging machine learning, automation, and advanced analytics to enhance detection and response capabilities.

Natera is a global leader in cell-free DNA (cfDNA) testing, dedicated to oncology, women’s health, and organ health. They aim to make personalized genetic testing and diagnostics part of the standard of care. Their team consists of highly dedicated statisticians, geneticists, doctors, laboratory scientists, business professionals, software engineers and many other professionals from world-class institutions, who care deeply for their work and each other.

• Support CMMC implementation efforts
• Conduct gap assessments against CMMC/NIST SP 800-171 requirements
• Assist with the development and updates to the System Security Plan (SSP) and POA&M

Broadway Ventures transforms challenges into opportunities with expert program management, cutting-edge technology, and innovative consulting solutions. As an 8(a), HUBZone, and Service-Disabled Veteran-Owned Small Business (SDVOSB), they empower government and private sector clients by delivering tailored solutions that drive operational success, sustainability, and growth.

• Serves as a recognized authority in the planning, governance, and strategic direction of large-scale IT programs.
• Provides senior advisory support to leadership and program management teams, drawing on deep expertise in IT program lifecycle management.
• Leads resolution of the most complex program management challenges arising across the concurrent portfolio of approximately 40 engineering projects.

DMI is a leading provider of digital services and technology solutions, headquartered in Tysons Corner, VA. With a focus on end-to-end managed IT services, including managed mobility, cloud, cybersecurity, network operations, and application development, DMI supports public sector agencies and commercial enterprises around the globe.

• Enhances the strategic pillars of a security compliance program and facilitate day-to-day compliance operations.
• Involved in multiple areas of the business where compliance and security impact operations.
• Works on assignments that are complex and require professional skepticism, judgment, initiative, and knowledge of SaaS Company positions.

Optro is the leading audit, risk, ESG, and InfoSec platform on the market, surpassing $300M ARR and continuing to grow. More than 50% of the Fortune 500 leverage their award-winning technology. They inspire each other to innovate and are proud of what they are producing.

• Perform all 7 steps of the Risk Management Framework (RMF) per DoDI 8510.01, producing required deliverables at each step
• Develop, maintain, and update RMF packages including System Security Plans (SSP), Security Assessment Reports (SAR), Risk Assessment Reports (RAR), and Plans of Action & Milestones (POA&M)
• Ensure compliance with federal, DoD, and DLA cybersecurity requirements, policies, and standards

FWI is building a team to provide Program Management Office (PMO) Support Services for the Defense Agencies Initiative (DAI). It has been recognized as a Top Workplace by the Washington Post in 2024 and 2025, offering excellent growth opportunities in a collaborative environment.

• Oversee the internal cybersecurity program, road map, and strategy.
• Partner with Product, Engineering, Legal, and Compliance leadership to determine risks and deploy risk management processes.
• Serve as Waymark’s HIPAA Security Officer, ensuring compliance with the HIPAA Security Rule.

Waymark is a mission-driven team transforming care for people with Medicaid benefits. They partner with communities, delivering technology-enabled, human-centered support to help patients stay healthy and thrive in Medicaid healthcare delivery.

• Own CMMC 2.0 and SOC 2 end-to-end, including control design and implementation.
• Lead all IT functions supporting corporate and program needs, owning IT architecture and tooling decisions.
• Provide guidance and escalation support for IT hardware/software issues; mentor IT Support Specialist & Cloud Infrastructure Engineer.

DEFCON AI leverages artificial intelligence, mathematical optimization, data analytics, and software engineering for resilient optimization of complex systems. They align outcomes with operational goals, better decision making, and empower customers to anticipate, assess, and mitigate the impacts of disruptions.

• Defining and driving cloud architecture strategy across AWS, Azure, and hybrid multi-cloud environments.
• Developing cloud reference architectures and producing cost/benefit analyses for cloud migration options.
• Leading cloud security architecture design in alignment with DHS Zero Trust requirements and FISMA standards.

DMI is a leading provider of digital services and technology solutions. They are committed to delivering secure, efficient, and cost-effective solutions that drive measurable results.