Cybersecurity policy jobs in Camden, NJCreate job alerts

Job Description Coho Technology Solutions is seeking a skilled Cybersecurity Engineer to provide technical expertise and support to the Naval Surface Warfare Center (NSWC) in Philadelphia, PA. The Cybersecurity Engineer will be responsible for implementing, maintaining, and validating IT security controls across diverse systems and platforms, ensuring compliance with DoD and Navy cybersecurity requirements. This role requires strong technical proficiency, knowledge of RMF processes, and the ability to safeguard mission-critical systems in a defense environment. Responsibilities (include but are not limited to): • Install, configure, troubleshoot, and maintain Linux/UNIX, Windows Server/Workstation, VMware/Hyper-V, storage, and database systems in compliance with cybersecurity standards., • Apply and track security patches, system updates, and backups; monitor systems to ensure vulnerability remediation and compliance with reporting requirements., • Conduct routine audits, user account management, and access control in accordance with DoD and NAVSEA policies., • Perform system performance tuning, security monitoring, and configuration management to optimize and protect IT assets., • Support risk management activities by developing and executing Security Assessment Plans (SAPs), Risk Assessment Reports (RARs), and Security Assessment Reports (SARs)., • Assist in the development, documentation, and submission of RMF authorization packages, including POA&Ms, Security Plans, and related ATO documentation., • Conduct system design reviews to identify vulnerabilities, ensure compliance with NIST 800-53 controls, and recommend mitigation strategies., • Provide technical guidance on new security technologies, encryption methods, and policy impacts for compliance with FISMA, FIPS, and DoD regulations., • Support database and application management, including implementation of access controls, inventories, SOPs, and system documentation., • Plan, test, and implement security improvements, hardware/software upgrades, and corrective actions to strengthen cybersecurity posture., • Perform vulnerability assessments, ACAS scans, and validation testing to ensure continuous monitoring and compliance with DoD directives., • Prepare technical documentation, reports, and presentations for stakeholders, ensuring clear communication of risks, findings, and corrective measures. Essential Job Qualifications and Requirements: • Clearance:, • Active DoD Secret Clearance required, with the capability to obtain Top Secret adjudication., • Education:, • Bachelor's degree in Cybersecurity, Computer Science, Computer/Electrical Engineering, or Mathematics with a computer science concentration (or equivalent)., • Experience:, • Minimum of 5 years of professional experience in cybersecurity engineering., • Certifications:, • DoD 8570.1M IAT Level I certification required. In addition, one or more of the following;, • CCNA-Security, • CySA+ **, • GICSP, • GSEC, • Security+ CE, • CND, • SSCP, • Travel: Owned by the Native Village of Eyak (NVE), a federally recognized Alaska Native Tribe, the Copper River Family of Companies are a collection of entities that deliver a complementary set of solutions and services to support the diverse missions and requirements of our clients. Proud participants of the Small Business Administration's (SBA) 8(a) Business Development Program since 2006, our companies consist of both current and graduation SBA 8(a) entities. It is our collective purpose to support the Tribe and diversify the NVE's ability to facilitate economic advancement. The income generated from our companies helps the Native Village of Eyak fund health and social services, economic development, natural resource/environmental education, jobs, job training, and other benefits to the NVE in a manner that is consistent with Alaskan Native cultural values and traditions. Copper River's Culture The Copper River Family of Companies has a positive, supportive, and thriving culture. At the foundation of our culture is a focus on collaboration. No matter your role or which operating company you work for, we are ONE TEAM working toward the same goals for our customers and for our collective owner- The Native Village of Eyak. How we treat each other is just as important as the work we deliver. Benefits • Comprehensive medical, dental, and vision coverage, • Flexible Spending Account - healthcare and dependent care, • Health Savings Account - high deductible medical plan, • Retirement 401(k) with employer match, • Open leave policy and paid holidays Disclaimer: The Copper River Family of Companies provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state, or local laws.

Job DescriptionCompany Description The City of Philadelphia values inclusion, integrity, innovation, empowerment, and hard work above all else. We offer a vibrant work environment, comprehensive health care and benefits, and the experience you need to grow and excel. If you’re interested in working with a passionate team of people who care about the future of Philadelphia, start here. The Office of Innovation & Technology (OIT) is the central IT agency for the City of Philadelphia headed by the Chief Information Officer (CIO). OIT oversees all major information and communications technology initiatives for the City of Philadelphia - increasing the effectiveness of the information technology infrastructure, where the services provided are advanced, optimized, and responsive to the needs of the City of Philadelphia’s businesses, residents, and visitors. OIT responsibilities include: identifying the most effective approach for implementing new information technology directions throughout city government; improving the value of the city’s technology assets and the return on the city’s technology investments; ensuring data security continuity; planning for continuing operations in the event of disruption of information technology or communications services; and supporting accountable, efficient and effective government across every city department, board, commission and agency. Job Description The City of Philadelphia is seeking a highly motivated and experienced Information Security Manager - Public Safety to join our team in support of the Chief Information Security Officer (CISO) and the Deputy CIO – Public Safety (DCIO Public Safety). This critical role will be responsible for ensuring the confidentiality, integrity, and availability of our information systems, with a strong focus on compliance with the Criminal Justice Information (CJI) Security Policy and the NIST Cybersecurity Framework. The ideal candidate possesses a deep understanding of security best practices, regulatory requirements, and technical expertise in implementing and maintaining security controls within a public safety context. Essential Functions: • Assists the CISO and DCIO - Public Safety on cybersecurity issues, policies and practices within the OIT 911 and Public Safety functions., • Assists the CISO and DCIO - Public Safety in directing and approving security system designs within the OIT 911 and Public Safety functions., • Maintains relationships with other localities, state and federal law enforcement and other related government agencies including the Pennsylvania Emergency Management Agency and PEMA 911 advisory board., • Schedules periodic security audits and works with outside consultants as appropriate for independent security audits., • Implement and maintain security controls in accordance with CJIS Security Policy and the NIST CSF framework, specifically tailored for public safety environments., • Conduct regular security assessments, vulnerability scans, and penetration testing to identify and mitigate risks., • Develop and maintain security documentation, including System Security Plans (SSPs), Security Assessment Reports (SARs), and Plans of Action & Milestones (POA&Ms)., • Respond to security incidents and implement corrective actions., • Monitor security logs and alerts to identify suspicious activity and potential threats., • Collaborate with IT teams and public safety personnel to ensure secure system configurations and deployments., • Provide security awareness training to employees, with a focus on public safety specific threats and vulnerabilities., • Participate in security audits and compliance reviews., • Perform risk assessments and identify mitigation strategies., • Evaluate and recommend security tools and technologies suitable for public safety environments.Qualifications, • Completion of a bachelor’s degree program at an accredited college or university, which has included major course work in computer science, information science, system analysis, software engineering, or a closely related field., • Minimum of eight years of work experience, which must include at least three years of direct IT security-related experience, including exposure to the NIST Framework., • Experience performing information security risk assessments including identifying threats, vulnerabilities, and risk., • Experience with Vulnerability Management programs., • Experience working with common information security tools including Endpoint Detection and Response, network filtering technologies (Web, DNS), Identity and Access Management solutions, and SIEM technologies required., • Experience managing a team of professionals and demonstrated project management skills., • Knowledge and familiarity with CJIS Security Policy and NIST 800-53 rev. 5 framework., • Valid Certified Information Systems Security Professional (CISSP) credential, such as CISSP-ISSAP, CISSP-ISSEP or CISSP-ISSMP, is preferred but not required., • Should have experience with planning, auditing, and risk management, as well as contract and vendor negotiation., • Ability to develop requests for and evaluate proposals in reference to leading-edge information services technology. Additional Information Salary Range: $110,000 - $120,000 Important: To apply, candidates must provide a cover letter and a resume. Discover the Perks of Being a City of Philadelphia Employee: • We offer Comprehensive health coverage for employees and their eligible dependents, • Our wellness program offers eligibility for the discounted medical plan, • Employees receive paid vacation, sick leave, and holidays, • Generous retirement savings options are available, • Pay off your student loans faster - As a qualifying employer, City of Philadelphia employees are eligible to participate in the Public Service Loan Forgiveness program. Join the ranks of hundreds of employees who have already benefited from this program and achieved student loan forgiveness., • Enjoy a Free Commute on SEPTA - Starting September 1, 2023, eligible City employees will no longer have to worry about paying for SEPTA public transportation. Whether you're a full-time, part-time, or provisional employee, you can seize the opportunity to sign up for the SEPTA Key Advantage Program and receive free Key cards for free rides on SEPTA buses, trains, trolleys, and regional rails. *The successful candidate must be a city of Philadelphia resident within six months of hire Effective May 22, 2023, vaccinations are no longer required for new employees that work in non-medical, non-emergency or patient facing positions with the City of Philadelphia. As a result, only employees in positions providing services that are patient-facing medical care (ex: Nurses, doctors, emergency medical personnel), must be fully vaccinated. The City of Philadelphia is an Equal Opportunity employer and does not permit discrimination based on race, ethnicity, color, sex, sexual orientation, gender identity, religion, national origin, ancestry, age, disability, marital status, source of income, familial status, genetic information or domestic or sexual violence victim status. If you believe you were discriminated against, call the Philadelphia Commission on Human Relations at 215-686-4670 or send an email to .

Job Description Paragon Cyber Solutions is seeking a highly skilled and mission-driven Information System Security Manager (ISSM) III to join our team in support of a critical defense program based at the Naval Surface Warfare Center Philadelphia Division (NSWCPD). This position is contingent upon contract award. As the ISSM III, you will play a central role in the development, implementation, and oversight of information security policies, procedures, and systems to ensure the integrity, confidentiality, and availability of mission-critical systems. You will provide strategic leadership for cybersecurity compliance across the program and support certification and accreditation activities in accordance with DoD and NIST frameworks. Requirements • Serve as the senior Information Assurance and cybersecurity advisor for assigned systems., • Implement and enforce DoD cybersecurity policies and standards in accordance with DFARS 252.239-7001 and Privileged Access Agreement requirements., • Manage cybersecurity strategy, including personnel, infrastructure, security architecture, policy enforcement, risk assessments, emergency response planning, and training., • Oversee the Risk Management Framework (RMF) lifecycle for DoD systems and ensure appropriate security controls are applied and documented., • Coordinate across cross-functional teams and government stakeholders to ensure cybersecurity requirements are met., • Ensure compliance with all applicable DoD cybersecurity directives and standards, including DIACAP/RMF and NIST SP 800-53., • Maintain all documentation necessary for system accreditation and continuous monitoring., • Support site inspections, audits, and cybersecurity reporting activities. Education • Minimum of 8 years of progressive experience managing and implementing organizational information security programs., • CAP (Certified Authorization Professional), • CASP+ CE (CompTIA Advanced Security Practitioner), • CISM (Certified Information Security Manager), • CISSP (or Associate) (Certified Information Systems Security Professional), • GSLC (GIAC Security Leadership Certification), • CCISO (Certified Chief Information Security Officer), • HCISPP (HealthCare Information Security and Privacy Practitioner)

Job Description Type: Full Time Location: Philadelphia, PA (Travel - CONUS locations, less than 5%) Overtime Exempt: Yes Reports To: ARMADA HQ Security Clearance Required: Secret CONTINGENT UPON AWARD*** Duties & Responsibilities: • The Information Systems Security Engineer II (ISSE II) shall assist with the developing, maintaining, and tracking Risk Management Framework (RMF) system security plans which include System Categorization Forms, Platform Information Technology (PIT) Determination Checklists, Assess Only (AO) Determination Checklists, Implementation Plans, System Level Continuous Monitoring (SLCM) Strategies, System Level Policies, Hardware Lists, Software List, System Diagrams, Privacy Impact Assessments (PIA), and Plans of Action and Milestones (POA&M)., • The Information Systems Security Engineer II shall execute the RMF process in support of obtaining and maintaining Interim Authority to Test (IATT), AO approval, Authorization to Operate (ATO), and Denial of Authorization to Operate (DATO)., • The Information Systems Security Engineer II shall identify and tailor IT and CS security control baselines based on RMF guidelines and categorization of the RMF boundary., • The ISSE II shall perform Ports, Protocols, and Services Management (PPSM)., • The ISSE II shall perform IT and CS vulnerability-level risk assessments., • The ISSE II shall execute security control testing as required by a risk assessment or annual security review (ASR)., • The ISSE II shall mitigate and remediate IT and CS system level vulnerabilities for all assets withing the boundary per STIG requirements., • The ISSE II shall develop and maintain Plans of Actions and Milestones (POA&M) in Enterprise Mission Assurance Support Service (eMASS)., • The ISSE II shall develop and maintain system level IT and CS policies and procedures for respective RMF boundaries and/or guidance provided by the command ISSMs., • The ISSE II shall implement and assess STIG and SRGs., • The ISSE II shall perform and develop vulnerability assessments with automated tools such as Assured Compliance Assessment Solution (ACAS), Security Content Automation Protocol (SCAP) Compliance Check (SCC) and Evaluate STIG., • The ISSE II shall deploy security updates to Information System components., • The ISSE II shall perform routine audits of IT system hardware and software components., • The ISSE II shall maintain inventory of Information System components., • The ISSE II shall participate in IT change control and configuration management processes., • The ISSE II shall upload vulnerability data in Vulnerability Remediation Asset Manager (VRAM)., • The ISSE II shall image or re-image assets that are part of the assigned RMF boundary, • The ISSE II shall install software and troubleshoot software issues as necessary to support compliance of the RMF boundaries' assets., • The ISSE II shall assist with removal of SSD, HDD or other critical components of assets before destruction and removal from the RMF boundary., • The ISSE II shall provide cybersecurity patching of assets in times of DoD and DoN TASKORDs, FRAGORDs, or even designated by Command ISSM, ACIO, and/or Code 104 management., • The ISSE II shall support configuration change documentation and control processes and maintaining DOD STIG Compliance., • The ISSE II shall support cyber compliance of assets that are part of an enterprise IT network to include Windows server and CISCO networking hardware. This includes assessing vulnerabilities, patching and meeting requirements of the STIG for the hardware., • The ISSE II shall report compliance issues of network hardware to management., • Ability to work as a team member, communicate, perform office functions and use office tools, customer focused and deliver exceptional performance., • Ability to develop and implement information assurance guidance and execute ISS functions with little to no supervision., • Bachelor's degree in computer science, information technology, or an equivalent technical degree from an accredited college or university. Disclaimer: The above information has been designed to indicate the general nature and level of work to be performed. It is not designed to contain or be interpreted as a comprehensive inventory of all duties, responsibilities, and qualifications required of the contractor assigned to this position. Applying: If you feel you have the knowledge, skills and abilities for this position visit our careers page at . Special Notes: Relocation is not available for these jobs. ARMADA provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, gender, sexual orientation, gender identity or expression, national origin, age, disability, genetic information, marital status, amnesty, or status as a covered veteran in accordance with applicable federal, state and local laws. ARMADA complies with applicable state and local laws governing non-discrimination in employment in every location in which the company has facilities. This policy applies to all terms and conditions of employment, including, but not limited to, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation, and training. Must be able to successfully pass a background check, and pre-employment drug testing. Job offers are contingent upon results of background check and drug testing.

Job Description Paragon Cyber Solutions is seeking a dynamic Policy Executive / Strategic Planner (Technical Writer) to support the Naval Surface Warfare Center Philadelphia Division (NSWCPD). This position is contingent upon contract award and will play a key role in documenting and communicating cybersecurity policies, procedures, and strategic plans for high-impact defense initiatives. This role is ideal for a technically savvy writer with a background in IT or cybersecurity who can translate complex requirements into clear, actionable policy documents and presentations for executive-level stakeholders. Requirements • Develop, revise, and maintain cybersecurity-related policies, procedures, and strategic planning documents in compliance with DoD and Navy standards., • Translate complex technical and regulatory information into clear and concise written materials suitable for technical and executive audiences., • Support the development of system design documentation, cybersecurity operations manuals, and procedural guides., • Lead the creation of strategic planning documents that support mission objectives and align with evolving cybersecurity requirements., • Collaborate with engineers, ISSOs, ISSMs, Navy stakeholders, and program leadership to gather input and produce high-quality deliverables., • Present and explain technical content to leadership, including system owners, government sponsors, and certification authorities., • Ensure all documentation meets quality assurance, formatting, and version control standards required by the program. Education • Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related STEM field from an accredited college or university. Experience • A minimum of 8 years of experience developing technical documentation, writing IT/cybersecurity policies, or supporting strategic planning in a government or defense environment., • Strong understanding of cybersecurity operations and risk management principles., • Health Care Plan (Medical, Dental & Vision)., • Retirement Plan (401K w/ employer matching)., • Paid Time Off & Paid Federal Holidays., • Short and Long-Term Disability., • Healthy Work-Life Balance.

Job Description Barbaricum is a rapidly growing government contractor providing leading-edge support to federal customers, with a particular focus on Defense and National Security mission sets. We leverage more than 17 years of support to stakeholders across the federal government, with established and growing capabilities across Intelligence, Analytics, Engineering, Mission Support, and Communications disciplines. Founded in 2008, our mission is to transform the way our customers approach constantly changing and complex problem sets by bringing to bear the latest in technology and the highest caliber of talent. Headquartered in Washington, DC's historic Dupont Circle neighborhood, Barbaricum also has a corporate presence in Tampa, FL, Bedford, IN, and Dayton, OH, with team members across the United States and around the world. As a leader in our space, we partner with firms in the private sector, academic institutions, and industry associations with a goal of continually building our expertise and capabilities for the benefit of our employees and the customers we support. Through all of this, we have built a vibrant corporate culture diverse in expertise and perspectives with a focus on collaboration and innovation. Our teams are at the frontier of the Nation's most complex and rewarding challenges. Join our team. Barbaricum is seeking an Information System Security Manager (ISSM) to guide the delivery of secure systems within the Navy's Risk Management Framework (RMF). This role provides cybersecurity oversight and lifecycle documentation support to ensure sustained compliance and threat resilience. Responsibilities: • Develop and submit RMF and DIACAP risk assessment packages, • Ensure systems and solutions meet DoD cybersecurity policy and accreditation requirements, • Track system compliance status and coordinate with stakeholders to mitigate security gaps, • Maintain configuration management of security baselines and assess impacts of change, • Guide teams through cybersecurity audits and implement corrective action plans as needed, • Maintain continuing education hours and OJT milestones per DoD policy Qualifications: • Active DoD Secret Clearance; TS eligible, • Bachelor's degree or equivalent CNSSI/military certification, • 3+ years of specialized experience in Information Systems Security Management (72), • One of the following certifications: Security+ (CE), CAP, CASP, or PMP, • Familiarity with NAVEDTRA cybersecurity evaluation requirements All qualified applicants will receive consideration for employment without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, or any other basis prohibited by law.

Job Description Paragon Cyber Solutions is hiring a skilled Information System Security Officer (ISSO) III to support cybersecurity and compliance functions in direct support of the Naval Surface Warfare Center Philadelphia Division (NSWCPD). This position is contingent upon contract award. The ISSO III will play a vital role in implementing and maintaining security controls, supporting incident response, and ensuring overall system compliance with Department of Defense (DoD) cybersecurity standards and frameworks. If you’re looking for an opportunity to make an impact while supporting national security, we want to hear from you. Requirements • Ensure security compliance across information systems by implementing DoD cybersecurity policies, standards, and guidelines., • Assist in applying Risk Management Framework (RMF) requirements for system security accreditation and authorization., • Coordinate and enforce required security changes and control implementations across systems and networks., • Conduct vulnerability scans, threat assessments, and cyber risk analysis on mission systems., • Support cyber incident response efforts including investigation, containment, documentation, and reporting., • Perform continuous monitoring of system security postures and coordinate with other cybersecurity personnel to maintain system integrity., • Prepare and maintain system security documentation, including System Security Plans (SSPs), Plan of Action and Milestones (POA&Ms), and security assessment reports., • Participate in site inspections, compliance audits, and assessments by government or third-party assessors. Education • At least 6 years of relevant experience coordinating security implementation, policy compliance, vulnerability/threat assessments, and supporting incident response and investigation efforts. Certifications (one or more required): Must meet IAM Level II IAWF baseline certification standards under DoD 8140/8570.01-M, with at least one of the following: • CAP (Certified Authorization Professional), • CASP+ CE (CompTIA Advanced Security Practitioner), • CISM (Certified Information Security Manager), • CISSP (or Associate), • GSLC (GIAC Security Leadership Certification), • CCISO (Certified Chief Information Security Officer), • Health Care Plan (Medical, Dental & Vision)., • Retirement Plan (401K w/ employer matching)., • Paid Time Off & Paid Federal Holidays., • Short and Long-Term Disability., • Healthy Work-Life Balance.

Job Description POSITION OVERVIEW The Exam Integrity Manager is a senior member of NBME's Exam Integrity team, serving as a subject matter expert in protecting the integrity and validity of NBME's assessment products. This role leads complex investigations, mentors junior staff, and collaborates with internal and external stakeholders to develop, implement, and refine policies, procedures, and investigative strategies. The ideal candidate brings experience in exam security, investigations, data analysis, risk management and assessment or credentialing industry practices, with the ability to analyze threats, develop policy, and guide cross-functional teams in high-stakes environments. This role has been designated as primarily remote, meaning it requires little to no onsite attendance. While this role can be designated as remote, you are offered the flexibility to select if you prefer to work primarily remotely, hybrid, or onsite. We're open to considering candidates within 50 miles of our office location in Philadelphia, PA. At NBME, we continue to innovate and improve how we fulfill the evolving needs of the healthcare community. This commitment starts and ends with the people at NBME. By recruiting and empowering talented individuals from various disciplines and backgrounds, which includes professionals with diverse life experiences, abilities, and perspectives, NBME can take a well-informed, robust approach to advancing medical education and assessment for years to come. RESPONSIBILITIES • Manage the full lifecycle of exam integrity incidents, including triage, investigation, and resolution., • Conduct in-depth research and forensic analysis, including internet and social media investigations and engagement within relevant platforms., • Collaborate with internal teams such as psychometrics, test design, and marketing to assess vulnerabilities and implement auditable security practices., • Coordinate and present investigative findings and risk assessments to senior leadership and other stakeholders., • Develop, document, and maintain policies, procedures, workflows, and process maps to modernize exam integrity operations and enhance program management., • Support strategic initiatives to strengthen enterprise-level exam security programs, including policies for digital media analysis, incident response, and content protection., • Stay current with emerging threats, assessment industry trends, and security best practices., • Mentor junior team members, providing guidance on investigative protocols and professional development., • Participate in professional development activities, industry conferences, and collaborative peer networks. Skills and Abilities • Strong analytical, investigative, and problem-solving skills., • Exceptional written, verbal, and presentation communication abilities., • Proficiency in Microsoft Office Suite and Adobe Acrobat Pro., • Ability to navigate and engage with current and emerging social media platforms for investigative purposes., • Skilled in relationship building and working in a matrixed environment., • High level of integrity, confidentiality, and ethical judgment., • Familiarity with assessment design and content development., • 4–7 years of relevant experience in exam security, credentialing industry, investigations, compliance, or risk management., • Background in policy development, investigative procedures, and cross-functional collaboration., • Familiarity with high-stakes assessment processes (content development and security, psychometrics, delivery). NBME is a not-for-profit organization that specializes in the creation of assessments and learning tools for physicians and health professionals. Our mission is to advance assessment of these professionals to achieve optimal care for all, supporting the development of a highly effective, diverse and compassionate health care workforce. Founded in 1915, NBME develops and manages the United States Medical Licensing Examination® with the Federation of State Medical Boards. We offer a comprehensive portfolio of assessment products for every stage of the medical school journey and provide assessment services to various health profession organizations. We are dedicated to advancing innovative assessment approaches through research, collaboration and contributions to the medical education and assessment communities. In 2024, we expanded our assessment capabilities to include simulation through the acquisition of MedVR Education. Learn more on NBME's website. NBME's Community Collaborations and Contributions NBME believes that a key path to meeting our mission is collaborating with and supporting our communities. Our Community Collaborations and Contributions programs provide resources and recognition to medical educators and researchers advancing the field of assessment throughout their careers. In addition, we invest in fee assistance, scholarships and pathway programs to aid learners and help support increased representation in health care. Headquartered in Philadelphia, NBME also gives to local organizations that advance health equity and access and positively impact social determinants of health. Compensation we are offering for this position is at $92,800 - $116,000/year. Please note that the offered rate for this position typically aligns with the minimum to midrange of this grade, but it can vary based on the successful candidate's qualifications and experience, department budget, and an internal equity review. The NBME offers competitive salaries, excellent benefits, and a rewarding work environment. Excellent Benefits include: Healthcare, Dental, Prescription, and Vision plans; 401(k) w/match, Tuition Reimbursement Plan, Commuter Benefit: Public Transit or Parking options. Remote Friendly Workplace. NBME is an Equal Opportunity Employer. We will consider all qualified applicants for employment without regard to race; color; sex; gender identity; sexual orientation; religious practices and observances; national origin; pregnancy, childbirth, or related medical conditions; status as a protected veteran or spouse/family member of a protected veteran; or disability. Job Posted by ApplicantPro

Job Description Coho Technology Solutions is seeking a highly qualified Navy Validator (NQV) to support Risk Management Framework (RMF) activities at the Naval Surface Warfare Center (NSWC) in Philadelphia, PA. The NQV will serve as an independent third party, assessing and validating Navy IT systems to ensure compliance with DoD cybersecurity requirements. This role requires a fully credentialed Navy Qualified Validator, experienced in preparing and validating RMF packages, conducting risk assessments, and delivering authoritative validation reports in support of system Authorization to Operate (ATO) decisions. Responsibilities (include but are not limited to): • Register and maintain listing as a Navy Qualified Validator; perform and support validation of Navy RMF packages., • Conduct independent third-party assessments to determine whether systems have implemented approved security control baselines., • Act as a trusted agent to the Security Control Assessor (SCA) and SCA Liaison, ensuring impartiality and separation of duties from ISSMs., • Review and validate RMF packages in accordance with DoD Instruction 8510.01, NAVSEA guidance, and the Navy SCA Risk Assessment Guide., • Prepare and deliver Security Assessment Plans (SAPs), validation test procedures, validation artifacts, validation results, and compliance documentation., • Optimize assessment and authorization (A&A) testing and validation procedures to ensure accurate reporting and compliance with cybersecurity requirements., • Document findings, residual risks, and security control compliance in Security Assessment Reports (SARs) and Risk Assessment Reports (RARs)., • Consolidate element-level validation results into enclave-level SARs and RARs, coordinating with Level II/III Validators as required., • Provide technical expertise and recommendations to stakeholders to support system accreditation and authorization decisions., • Clearance:, • Active DoD Secret Clearance required, with the capability to obtain Top Secret adjudication., • Education:, • Bachelor's degree in Computer Science or related technical field., • Experience:, • Minimum of 10 years of professional experience in program/project management, with demonstrated experience supporting DoD cybersecurity and RMF processes., • Certifications:, • Must possess a Fully Qualified Validator Certificate issued by the Navy Certification Authority (CA) at time of award. In addition, one or more of the following:, • CAP – Certified Authorization Professional, • CASP+ CE – CompTIA Advanced Security Practitioner, • CISM – Certified Information Security Manager, • CISSP (or Associate) – Certified Information Systems Security Professional, • GSLC – GIAC Security Leadership Certification, • CCISO – Certified Chief Information Security Officer, • HCISPP – HealthCare Information Security and Privacy Practitioner, • Travel: Owned by the Native Village of Eyak (NVE), a federally recognized Alaska Native Tribe, the Copper River Family of Companies are a collection of entities that deliver a complementary set of solutions and services to support the diverse missions and requirements of our clients. Proud participants of the Small Business Administration's (SBA) 8(a) Business Development Program since 2006, our companies consist of both current and graduation SBA 8(a) entities. It is our collective purpose to support the Tribe and diversify the NVE's ability to facilitate economic advancement. The income generated from our companies helps the Native Village of Eyak fund health and social services, economic development, natural resource/environmental education, jobs, job training, and other benefits to the NVE in a manner that is consistent with Alaskan Native cultural values and traditions. Copper River's Culture The Copper River Family of Companies has a positive, supportive, and thriving culture. At the foundation of our culture is a focus on collaboration. No matter your role or which operating company you work for, we are ONE TEAM working toward the same goals for our customers and for our collective owner- The Native Village of Eyak. How we treat each other is just as important as the work we deliver. Benefits • Comprehensive medical, dental, and vision coverage, • Flexible Spending Account - healthcare and dependent care, • Health Savings Account - high deductible medical plan, • Retirement 401(k) with employer match, • Open leave policy and paid holidays Disclaimer: The Copper River Family of Companies provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state, or local laws.

Job Description Forhyre is seeking a talented individual that will be able to provide security architecture support and interface across the program as needed. This support includes, but is not limited to, cybersecurity solutions, providing technical strategy for solutions, guidance, policy, and implementations. The successful candidate for this position is a highly motivated individual, with a strong IT security background who excels integrating, operating, and deploying security technology and solutions and interacts well with both internal teams and clients. Note: U.S. citizens and those authorized to work in the U.S. are encouraged to apply. We are unable to sponsor at this time. Responsibilities: • Engineer, implement and monitor security measures for the protection of computer systems, networks and information, • Develop and implement security policies and controls to support the Cyber Security framework, • Manage the existing cyber security training program across global, multilingual business, • Assists in ensuring global Information security program meets all industry regulations, standards, and compliance requirements, • Drive adoption of infrastructure security best practices and work with Information Technology teams to ensure security standards are maintained, • Implement technology to proactively scan Information Technology environment for security breaches and suspicious activity, • Continuous improvement in the areas of Information Security technologies, techniques and processes, • Develops and maintains an effective system for the distribution of regular key performance indicator reports and dashboard, • Ability to interpret penetration test results and describe issues and fixes to non-security expert, • Responsible for leading an accurate & comprehensive status reporting to the executive steering committee, • Create and implement SOP/ process improvement initiatives to achieve outcomes that align or exceed the expectations of strategic roadmap Skills & Experience • 8+ years hands-on experience designing or implementing security solutions, including all related documentation and artifacts, • Analytical ability, problem-solving skills, and ability to break down complex problems into actionable steps, • Extensive experience in design and development of enterprise security architectures. Experience must include a wide range of work in creating diagrams and documentation with all components that comprise IT systems including network topology., • Strong knowledge and experience in secure enterprise architecture design, especially with regard to IAM, NDR, EDR, SIEM, AI/ML, and other cybersecurity tools and resultant applications, • Experience selecting effective methods, techniques, and evaluation criteria to achieve desired outcomes, • Previous experience developing architectures, strategies, strategic plans, roadmaps, and technical standards for the federal IT enterprise environment., • Vulnerability Assessment testing and/or Penetration Testing (preferred), • Robotic Process Automation/Intelligent Automation (preferred), • Business case development supporting security technology solutions (preferred), • Additional certifications demonstrating cybersecurity/technical mastery (preferred)

Job Description Type: Full Time Location: Philadelphia, PA (Travel - CONUS locations, less than 5%) Overtime Exempt: Yes Reports To: ARMADA HQ Security Clearance Required: Active Secret CONTINGENT UPON AWARD*** Duties & Responsibilities: • The Information Systems Security Engineer III (ISSE III) shall assist with the developing, maintaining, and tracking Risk Management Framework (RMF) system security plans which include System Categorization Forms, Platform Information Technology (PIT) Determination Checklists, Assess Only (AO) Determination Checklists, Implementation Plans, System Level Continuous Monitoring (SLCM) Strategies, System Level Policies, Hardware Lists, Software List, System Diagrams, Privacy Impact Assessments (PIA), and Plans of Action and Milestones (POA&M)., • The Information Systems Security Engineer III shall execute the RMF process in support of obtaining and maintaining Interim Authority to Test (IATT), AO approval, Authorization to Operate (ATO), and Denial of Authorization to Operate (DATO)., • The Information Systems Security Engineer III shall identify and tailor IT and CS security control baselines based on RMF guidelines and categorization of the RMF boundary., • The ISSE III shall perform Ports, Protocols, and Services Management (PPSM)., • The ISSE III shall perform IT and CS vulnerability-level risk assessments., • The ISSE III shall execute security control testing as required by a risk assessment or annual security review (ASR)., • The ISSE III shall mitigate and remediate IT and CS system level vulnerabilities for all assets withing the boundary per STIG requirements., • The ISSE III shall develop and maintain Plans of Actions and Milestones (POA&M) in Enterprise Mission Assurance Support Service (eMASS)., • The ISSE III shall develop and maintain system level IT and CS policies and procedures for respective RMF boundaries and/or guidance provided by the command ISSMs., • The ISSE III shall implement and assess STIG and SRGs., • The ISSE III shall perform and develop vulnerability assessments with automated tools such as Assured Compliance Assessment Solution (ACAS), Security Content Automation Protocol (SCAP) Compliance Check (SCC) and Evaluate STIG., • The ISSE III shall deploy security updates to Information System components., • The ISSE III shall perform routine audits of IT system hardware and software components., • The ISSE III shall maintain inventory of Information System components., • The ISSE III shall participate in IT change control and configuration management processes., • The ISSE III shall upload vulnerability data in Vulnerability Remediation Asset Manager (VRAM)., • The ISSE III shall image or re-image assets that are part of the assigned RMF boundary, • The ISSE III shall install software and troubleshoot software issues as necessary to support compliance of the RMF boundaries' assets., • The ISSE III shall assist with removal of SSD, HDD or other critical components of assets before destruction and removal from the RMF boundary., • The ISSE III shall provide cybersecurity patching of assets in times of DoD and DoN TASKORDs, FRAGORDs, or even designated by Command ISSM, ACIO, and/or Code 104 management., • The ISSE III shall support configuration change documentation and control processes and maintaining DOD STIG Compliance., • The ISSE III shall support cyber compliance of assets that are part of an enterprise IT network to include Windows server and CISCO networking hardware. This includes assessing vulnerabilities, patching and meeting requirements of the STIG for the hardware., • The ISSE III shall report compliance issues of network hardware to management., • Ability to work as a team member, communicate, perform office functions and use office tools, customer focused and deliver exceptional performance. The above information has been designed to indicate the general nature and level of work to be performed. It is not designed to contain or be interpreted as a comprehensive inventory of all duties, responsibilities, and qualifications required of the contractor assigned to this position. Applying: If you feel you have the knowledge, skills and abilities for this position visit our careers page at . Special Notes: Relocation is not available for these jobs ARMADA provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, gender, sexual orientation, gender identity or expression, national origin, age, disability, genetic information, marital status, amnesty, or status as a covered veteran in accordance with applicable federal, state and local laws. ARMADA complies with applicable state and local laws governing non-discrimination in employment in every location in which the company has facilities. This policy applies to all terms and conditions of employment, including, but not limited to, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation, and training. Must be able to successfully pass a background check, and pre-employment drug testing. Job offers are contingent upon results of background check and drug testing.

Job Description GRC Engagement Leader Location: Remote (US) Level: Mid-to-Senior Career About Zaviant Zaviant, headquartered in Philadelphia, is a boutique consulting firm specializing in Data Security, Privacy, and Third-Party Risk Management. We help organizations build sustainable compliance and security programs that align with regulatory frameworks, mitigate risk, and drive operational resilience. Zaviant has been recognized among the top 50 companies on the prestigious 2025 Inc. Regionals Northeast list. Position Overview We are seeking a strategic, client-focused GRC Engagement Leader to join our growing Professional Services team. This is a high-impact role responsible for leading governance, risk, and compliance (GRC) consulting engagements from scoping through to successful delivery. The ideal candidate brings proven consulting experience, deep expertise in GRC frameworks and technologies, and a collaborative, client-first mindset. This individual will work closely with Zaviant's leadership, consultants, and client stakeholders to shape solutions, lead engagements, and help build the future of our GRC service line. Key Responsibilities • Lead GRC client engagements—covering risk assessments, security program development, policy creation, control design, and implementation projects., • Serve as the primary point of contact for clients—building relationships, managing scope and timelines, and ensuring satisfaction., • Provide subject matter expertise across frameworks such as NIST CSF, ISO 27001, SOC 2, HIPAA, GLBA, and state/federal privacy laws., • Oversee and guide junior consultants on deliverables including risk registers, audit responses, technical control documentation, and remediation planning., • Drive the design and implementation of GRC platforms including OneTrust, ZenGRC, and ServiceNow., • Conduct maturity assessments and help clients operationalize risk and compliance programs aligned to business needs., • Collaborate with cross-functional Zaviant teams on project delivery, knowledge sharing, and client growth strategies., • Contribute to team development through mentoring, coaching, and creating an inclusive, high-performance culture., • Support thought leadership and business development by contributing to proposals, workshops, and strategic initiatives. Must-Have Qualifications • Minimum 5–7 years of direct consulting experience in cybersecurity, GRC, audit, or privacy-related roles., • Active CISA and CISSP certifications, • Deep understanding of GRC frameworks and regulations such as NIST, ISO 27001, SOC 2, GDPR, CPRA, HIPAA, and GLBA., • Demonstrated success managing client relationships and delivering complex, multi-stakeholder consulting engagements., • Hands-on experience with GRC platforms like OneTrust, ZenGRC, ServiceNow, IBM Open Pages, or comparable systems., • Strong communication skills—able to distill complex issues and communicate clearly with both technical and non-technical audiences., • Ability to manage multiple projects in a fast-paced environment with shifting priorities. Preferred Qualifications • Additional certifications (e.g., CIPP/US, CRISC, ISO 27001 Lead Implementer, PMP)., • Experience in vendor risk management, incident response planning, or security operations support., • Background in a boutique or mid-size consulting environment is a strong plus. What You Bring to the Table • A problem-solver who can think strategically and execute tactically., • A leader who values collaboration, mentorship, and fostering a supportive team culture., • A builder—eager to shape growing service offerings and contribute to Zaviant's strategic direction., • A self-starter with a strong ownership mentality and a passion for client success. Compensation & Benefits Compensation • Competitive base salary, • Medical, Dental, and Vision insurance, • 401(k) with employer match, • Generous Paid Time Off and Paid Holidays, • Career development support, certification funding, and mentorship, • Opportunities for rapid growth and leadership Why Join Zaviant? At Zaviant, we're committed to building a collegiate, high-trust culture that supports growth, values ideas, and delivers real impact. You'll be empowered to lead with autonomy, collaborate cross-functionally, and help shape the future of GRC delivery for innovative organizations across the U.S.

The effort includes Cybersecurity policy, reviewing A&A artifacts, performing A&A validation, implementation of security postures, proven expertise in cybersecurity lifecycle management, coordination implementation, and sustainment of labs under RMF. Development, monitoring, and execution of the Cyb

Job Description Coho Technology Solutions is seeking an Information Assurance (IA) Compliance Specialist to provide cybersecurity support to the Naval Surface Warfare Center (NSWC) in Philadelphia, PA. The IA Compliance Specialist will ensure IT systems meet DoD, Navy, and federal cybersecurity requirements by managing compliance activities, maintaining system security posture, and supporting Risk Management Framework (RMF) processes. This role requires technical expertise, hands-on system administration, and a strong understanding of information assurance policies and practices. Responsibilities (include but are not limited to): • Install, configure, troubleshoot, and maintain Linux/UNIX, Windows, VMware/Hyper-V, databases, and storage systems in compliance with Navy cybersecurity standards., • Apply security patches, execute backups, and track patch/vulnerability compliance in accordance with DoD/NAVSEA directives., • Perform user account management, audits, and access control to ensure secure and compliant system operations., • Monitor and document system configurations, conduct performance tuning, and implement security remediation procedures., • Develop and maintain configuration management practices, baselines, and version control for hardware, software, and documentation., • Provide first-level technical support for locally developed applications and troubleshoot issues across hardware, software, and network components., • Plan, test, and implement security controls, database management processes, and corrective actions to maintain compliance with NIST 800-53 and FISMA requirements., • Conduct risk and impact assessments of new cybersecurity policies, encryption methods, and emerging technologies; provide recommendations to leadership., • Prepare and submit RMF A&A documentation packages (e.g., POA&Ms, Security Plans, SAPs, SARs, Continuous Monitoring Plans) to support Authorization to Operate (ATO) decisions., • Develop policies, white papers, SOPs, and user manuals supporting Information Assurance and RMF compliance., • Perform vulnerability assessments, ACAS scans, and validation testing; document results and residual risk in compliance with Navy SCA guidance., • Clearance:, • Active DoD Secret Clearance required, with the capability to obtain Top Secret adjudication., • Education:, • Bachelor's degree from an accredited institution OR CNSSI/NDU CISO certificate OR completion of equivalent DoD service training (e.g., NEC 2780/2779/2781 or equivalent)., • Experience:, • Minimum of 5+ years of professional experience in Information Assurance Compliance (DoD NICE Specialty Area 61), • Certifications:, • IAM Level II certification per DoD 8570.1M (e.g., CAP, CCNA, Security+ CE, ENSA) is required. In addition, one or more of the following;, • CCNA-Security,, • CySA+,, • GICSP,, • GSEC,, • CND, OR, • SSCP, • Travel: Owned by the Native Village of Eyak (NVE), a federally recognized Alaska Native Tribe, the Copper River Family of Companies are a collection of entities that deliver a complementary set of solutions and services to support the diverse missions and requirements of our clients. Proud participants of the Small Business Administration's (SBA) 8(a) Business Development Program since 2006, our companies consist of both current and graduation SBA 8(a) entities. It is our collective purpose to support the Tribe and diversify the NVE's ability to facilitate economic advancement. The income generated from our companies helps the Native Village of Eyak fund health and social services, economic development, natural resource/environmental education, jobs, job training, and other benefits to the NVE in a manner that is consistent with Alaskan Native cultural values and traditions. Copper River's Culture The Copper River Family of Companies has a positive, supportive, and thriving culture. At the foundation of our culture is a focus on collaboration. No matter your role or which operating company you work for, we are ONE TEAM working toward the same goals for our customers and for our collective owner- The Native Village of Eyak. How we treat each other is just as important as the work we deliver. Benefits • Comprehensive medical, dental, and vision coverage, • Flexible Spending Account - healthcare and dependent care, • Health Savings Account - high deductible medical plan, • Retirement 401(k) with employer match, • Open leave policy and paid holidays Disclaimer: The Copper River Family of Companies provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state, or local laws.