Essential Duties and Responsibilities:

General

• In coordination with President, sets strategic infrastructure technology direction for the organization.
• Connects IS&T to management strategy/planning efforts and business goals.
• Assists with the creation of the department’s annual budget and routinely monitors to ensure adherence to the budget.
• Responsible for the acquisition and management of talent for the IS&T Department, including but not limited to assisting with recruitment/onboarding, coaching and development, retention, and termination undertakings.
• Responsible for the overall management of IS&T personnel. Provides technical direction and professional support to department personnel, as well as ongoing, timely, and constructive feedback. Consults with HR as needed concerning complex or escalated personnel matters.
• Responsible for interfacing with the Government Security Committee (GSC) to address Foreign Ownership, Control, or Influence (FOCI) mitigations.
• Responsible for interfacing with the Coalfire Federal Board of Directors on cybersecurity issues.
• Serve as the Coalfire Federal Configuration Management Board (CMB) Chair and ensures the CMB:
  • Establishes and enforces security configuration settings for physical and information security/technology products, systems, and controls utilized within organizational-based systems.
  • Analyzes the security impact of change relative to physical and information security/technology products, systems, and controls prior to implementation.
  • Tracks, reviews, approves/ disapproves, and logs changes to physical and information security/technology products, systems, and controls.
  • Establishes and maintains baseline configurations for physical and information security/technology products, systems, and controls.

Information Security Specific

• Responsible for ensuring Coalfire Federal’s overall Information Security program and system components remain compliant to all Information Security legal, regulatory, and internal/external policies. Compliance frameworks include NIST SP 800-171/Cyber Security Maturity Model Certification (CMMC), FedRAMP, and ISO 27000:2022.
• Responsible for establishing a Zero Trust Architecture that trusts communications on an exception basis by leveraging internal network segmentation of systems and services to enhance security.
• Responsible for establishing, training, and testing an operational incident-handling capability for organizational systems to detect and respond to potentially malicious and unauthorized activity.
• Plans, implements, and tests network and systems to ensure a secure and efficient computing environment. Oversees security of systems, networks, and enterprise information.
• Facilitates IT security audits or investigations, as needed.
• Develops and implements business continuity protocols to minimize disruption to business operations in the event of emergency situations or data loss.

Information Technology Specific

• Responsible for ensuring Coalfire Federal systems remain patched and securely configured to mitigate threats
• Independently manages the IT function, while keeping leadership aware of activities, challenges, and recommendations for upgrades.
• Oversees the IT onboarding process for new hires, including but not limited to preparing their IT setup, working with the hiring manager and HR to determine IT needs (equipment, software, tools, access rights, etc.), ordering and setting up equipment prior to their start, and providing appropriate IT technical and security training.
• Ensures adherence with IT project plan(s).
• Leads deadline management; closely monitors progress on and ability to meet the most critical time sensitive tasks.
• Enforces standard operating policies and procedures.

• Bachelor's degree, with a computer science or technology focus preferred.
• At least five years of progressively responsible experience in the IT field.
• CISSP, CISO or CISM certified.
• Provide expert advice and guidance on security and privacy best practices
• Proficient with Microsoft Operating Systems, Azure, and Office 365 in the Government Community Cloud High (GCCH) and related technologies.
• Experience providing support for PC, networking and server support
• Excellent knowledge of IT best practices and IT systems and management
• Implementing and maintaining security and privacy policies, procedures, and standards
• Demonstrated ability to coach and train users and employees technology uses and practices.
• Must be an effective team player with a positive attitude
• Strategic, proactive and resourceful thinker, able to see the big picture, plan, identify gaps and propose solutions that will support the company in achieving their plans and goals.
• Experience implementing and maintaining an Information Security Management System
• Highly autonomous and driven to be efficient, with an understanding of when Executive Management needs to be involved in the decision-making process.
• Exceptional interpersonal and communication skills, verbal and written, with an ability to interact with and maintain the trust of vendors, partners, managers, subordinates, and employees at all levels.

• FOCI experience
• Experienced at software, hardware and other technology procurement negotiations.
• Able to understand business objectives and requirements and apply technology to help achieve them

• Health, dental, and vision insurance with an employer contribution
• Flexible paid time off
• A generous 401(k) plan
• A corporate wellness program
• Stock Appreciation Rights (SARs)
• Tuition reimbursement
• Certification reimbursement