ZTA Security Controls Assessor

February 15

⚔️ Virginia – Remote

Although this job is listed in Virginia, this company may be open to hiring remote in other states.

⏰ Full Time

🟡 Mid-level

🟠 Senior

👮‍♂️ Security Engineer

Apply Now

Receive Emails with Similar Jobs

ShorePoint Inc

WebsiteLinkedInAll Job Openings

ShorePoint recognizes that cybersecurity is the challenge of our generation. Our vision is to be the premier provider of cybersecurity services, delivering a security model capable of keeping pace with today’s rapidly changing landscape. ShorePoint is a privately-held cybersecurity services company with the experience and capabilities needed to help public and private sector clients protect their most critical assets from cyber threats.

Cyber Security • Security • Continuous Diagnostics and Mitigation (CDM) • Information Technology • Continuous Monitoring

2 - 10 employees

📋 Description

• Conduct Zero Trust-focused gap analyses, mapping current capabilities to the five pillars of the CISA security model and aligning them with the CISA ZTA Maturity Model 2.0 and NIST standards. • Review, decompose, and consolidate requirements from diverse government policies, memoranda, and directives. • Develop and execute a roadmap for implementing and maintaining enterprise cybersecurity capabilities in on-premise and cloud environments. • Analyze existing capabilities, propose modernization strategies, and incorporate approved recommendations into roadmaps and documentation such as Integrated Master Schedules. • Document and implement Zero Trust security solutions for on-premise and cloud-based environments, following guidance outlined in OMB Memo M-22-09. • Collaborate with program managers, technical teams, and stakeholders to define project scope, deliverables, and timelines. • Provide technical guidance on the realization of cross-cutting security solutions that leverage Zero Trust product services and capabilities. • Assist in developing and delivering client-facing materials, including presentations, training curricula, and technical documentation. • Lead and support the development of documentation for system requirements, system analysis, and integration activities.

🎯 Requirements

• Strong understanding of the Zero Trust Framework, including federal policies, CISA guidance, and NIST standards. • Experience conducting gap analyses and aligning cybersecurity strategies with organizational and federal objectives. • Knowledge of OMB Memo M-22-09, CISA ZTA Maturity Model 2.0, and methodologies for system analysis and risk assessments. • Familiarity with IT architectural principles, including cloud, on-premise, centralized, and federated systems. • Understanding of integration challenges, cost estimation, system requirements determination, and methodologies for system analysis. • Proficiency in Agile environments and collaboration tools such as Jira and MS Teams. • Ability to develop and deliver effective presentations, training materials, and reports to diverse stakeholders. • Ability to build and maintain positive relationships with diverse stakeholders, fostering collaboration and support for cybersecurity endeavors. • Strong skills in decomposing and consolidating requirements, strategic planning, and aligning cybersecurity initiatives with organizational goals. • Familiarity with IT risk assessments, system verification/ hardening, and compliance standards. • Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, Mathematics, Engineering or a related field. • Demonstrated ability to apply critical thinking to develop undefined tasks into actionable processes and work streams. • Experience with mapping CISA security pillars to Zero Trust solutions and developing comprehensive security roadmaps. • Knowledge of federal cybersecurity standards and compliance requirements, including FISMA, NIST SP 800 series, and OMB guidelines. • Exceptional analytical thinking and problem-solving skills, with a focus on aligning cybersecurity initiatives with organizational goals. • Strong communication and collaboration skills to engage with diverse stakeholders effectively. • Requires U.S. citizenship in compliance with federal contract requirements. • Cybersecurity related certifications such as Security+, CASP or CISSP.

🏖️ Benefits

• 18 days of PTO • 11 holidays • 80% of insurance premium covered • 401k • continued education • certifications maintenance and reimbursement