Cybersecurity Lead
Company: Anadria Consulting
Location: Washington
Posted on: February 17, 2026
|
|
|
Job Description:
Job Description Job Description Description: About the Position:
The Cybersecurity Lead is responsible for overseeing the design,
implementation, and management of an organization’s cybersecurity
strategy and infrastructure. This role involves leading a team of
cybersecurity professionals to protect the organization's
information systems, network, and data from potential threats,
ensuring compliance with relevant security regulations and
standards. The Cybersecurity Lead will coordinate risk management
efforts, respond to security incidents, and work proactively to
secure all aspects of the organization’s digital presence. Key
Responsibilities: Cybersecurity Strategy & Leadership: Develop and
implement a comprehensive cybersecurity strategy aligned with the
organization’s business objectives and risk management framework.
Lead a team of cybersecurity professionals, providing direction,
guidance, and support on security-related issues. Ensure
cyber-related tasks are performed efficiently, accurately, on time,
and in compliance with all federal, state, and local regulations
and guidelines. Stay informed on the latest cybersecurity trends,
threats, and technologies to ensure the organization’s security
posture remains robust and up to date. Enforce National Institute
of Standards and Technology (NIST) RMF standards as well as Clinger
Cohen Act (CCA) and Federal Information Security Management Act
(FISMA) regulations. Ensure non-compliant controls are being
addressed in a timely manner (IAW DAF standards and best
practices). Maintain situational awareness of all equipment,
network protocols, and data within the affected security boundary.
Risk Management & Threat Assessment: Conduct regular risk
assessments to identify potential vulnerabilities, threats, and
areas of concern in the organization's infrastructure. Develop and
execute risk mitigation strategies, ensuring timely resolution of
security gaps and vulnerabilities. Implement and manage security
monitoring tools to detect and respond to cyber threats in
real-time. Collect initial vulnerability scanning deliverables,
specifically Assured Compliance Assessment Solution (ACAS) scans
and Security Technical Implementation Guide (STIG) checklists.
Contribute to the development, execution, and delivery of a supply
chain risk management (SCRM) Plan with an approach incorporating
the Cybersecurity and Infrastructure Security Agency (CISA) Secure
Software Development Attestation Form. Incident Response &
Investigation: Lead the response to cybersecurity incidents,
including data breaches, malware attacks, and network intrusions.
Investigate security incidents, analyze root causes, and implement
corrective actions to prevent future occurrences. Develop and
conduct post-incident analysis to improve the organization's
security policies and procedures. Security Architecture &
Infrastructure: Oversee the design, implementation, and maintenance
of secure network architectures, firewalls, intrusion
detection/prevention systems, and endpoint security solutions.
Collaborate with IT teams to ensure security controls are
effectively integrated into the infrastructure, cloud environments,
and application development processes. Ensure that security systems
are properly configured and continually updated to defend against
emerging threats. Compliance & Regulatory Management: Ensure the
organization complies with relevant cybersecurity regulations,
standards, and best practices (e.g., GDPR, HIPAA, NIST, ISO 27001).
Develop and maintain cybersecurity policies and procedures to
ensure compliance with internal and external requirements. Conduct
regular security audits, assessments, and compliance checks to
maintain certifications and identify areas of improvement. Employee
Training & Awareness: Lead cybersecurity training programs for
employees, raising awareness about potential threats such as
phishing, social engineering, and other forms of cyberattacks.
Provide guidance on secure practices for using IT systems, managing
passwords, and maintaining privacy and confidentiality.
Collaboration & Communication: Work closely with senior management
and other departments (e.g., IT, legal, operations) to integrate
cybersecurity into business processes and ensure alignment with
organizational goals. Communicate security risks and mitigation
strategies to non-technical stakeholders, making complex issues
understandable. Serve as the primary point of contact for all
cybersecurity-related matters, providing guidance and leadership
across the organization. Reporting & Documentation: Prepare and
present regular reports on logistics performance, inventory status,
cost analysis, and potential issues to senior management. Maintain
accurate records of logistics activities, transactions, and
communications with external partners. Ensure compliance with
internal reporting requirements and industry regulations. Provide
input, as needed, to cybersecurity content associated Contract Data
Requirements List (CDRL) deliverables and providing input to the
Monthly Status Reports (MSR). Vulnerability & Patch Management:
Oversee vulnerability management processes, ensuring regular
scanning and timely patching of systems, software, and
applications. Work with IT teams to ensure vulnerabilities are
addressed promptly, with minimal impact to operations. Continuous
Improvement & Innovation: Lead the continuous improvement of
security processes, tools, and strategies to enhance the
organization’s cybersecurity resilience. Evaluate and recommend new
cybersecurity technologies, solutions, and best practices to keep
the organization’s security posture ahead of evolving threats
Requirements: Cybersecurity Expertise: In-depth knowledge of
cybersecurity principles, frameworks, and technologies (e.g.,
firewalls, encryption, VPNs, IDS/IPS, SIEM). Strong understanding
of risk management, incident response, vulnerability management,
and security operations. Experience with cloud security, network
security, endpoint protection, and securing distributed systems.
Experienced working within the DoD Risk Management Framework (RMF)
process. Ability to interact with USG RMF personnel and participate
in Cybersecurity meetings. Leadership & Management: Proven ability
to lead, mentor, and manage a team of cybersecurity professionals.
Strong decision-making, problem-solving, and organizational skills
to lead effective security programs and projects. Incident Response
& Forensics: Expertise in leading incident response, digital
forensics, and root cause analysis. Ability to manage security
incidents effectively, providing timely resolution and reporting.
Regulatory Knowledge: Familiarity with cybersecurity compliance
regulations and frameworks, including NIST, ISO 27001, GDPR, and
industry-specific standards (e.g., HIPAA, PCI DSS). Certifications
(Preferred, but not required): Certified Information Systems
Security Professional (CISSP), Certified Information Security
Manager (CISM), or similar certifications. Other relevant security
certifications such as CompTIA Security, Certified Cloud Security
Professional (CCSP), or AWS Certified Security Specialty.
Communication & Analytical Skills: Strong communication skills,
both verbal and written, to articulate complex security concepts to
stakeholders. Excellent analytical and troubleshooting abilities to
identify security weaknesses and develop effective solutions.
Education and Experience: Bachelor’s degree in Cybersecurity,
Information Technology, Computer Science, or a related field. 7
years of experience in cybersecurity, with at least 3 years in a
leadership or senior technical role. Proven experience managing
security operations, incident response, and security risk
management. Certified Ethical Hacker (CEH) credential would be nice
to have. Working Conditions: Occasional after-hours work may be
required in the event of a security breach or ongoing incident. The
role may involve on-call availability to respond to security
incidents outside of standard working hours. Some travel may be
required for audits, training, or industry conferences.
Keywords: Anadria Consulting, Burke , Cybersecurity Lead, IT / Software / Systems , Washington, Virginia
