Job Description :
Hi,
Hope you are doing well
RADGOV requests you to review the following contract opportunity. If you are willing to consider this opportunity, please submit your resume by Replying back with an updated resume rate expectation. Feel free to contact us for any additional information.
RADGOV is a professional service organization helping customers create synergies of information through the use of leading edge software applications. To know more about RADGOV please visit us at
RADGOV - Federal It Consulting,Staffing and Other E .
Welcome to RADgov. RADgov combines years of experience building, and leveraging relationships, and building partnerships in the Government and private Sector .
IT Governance Lead Cyber Security
Diamondale, Michigan USA
Long Term Contract
Rate $88/hr on W2 for this position
Kindly reply back "I Confirm" if you are interested
Description:
please fill the skill matrix
Importance
Required Yrs of Exp
Yrs of Exp
Last Used
Familiarity and work experience leveraging NIST Moderate Controls (addressing Vulnerability Management & Asset Management)
Required
3 Years
Familiarity and work experience leveraging CIS Controls (addressing Vulnerability Management & Asset Management)
Required
3 Years
Proven expertise in NIST Cybersecurity Framework
Required
5 Years
Professional Experience in Large Information Technology environments
Required
10 Years
Professional Experience in IT Security
Required
5 Years
Experience as Manager Director with direct reports
Required
5 Years
Experience in the IT or Security Consulting Field
Highly desired
5 Years
Bachelors or Masters Degree in Computer Science, Information Systems, Business or Engineering
Required
4 Years
Interview Type: In Person Only
Years of Experience:
10 years of experience in the field.
Job Description:
- Builds and maintains key relationships with State of Michigan Agency leaders and managers for key strategic programs, specifically Vulnerability Management and Analytics.
- Ensures stakeholders are educated on the scope, expectations and impacts of key strategic programs and holds them accountable.
- Coordinates stakeholders, facilitates governance routines and provides program oversight.
- Develops and owns the communication plans with the Agencies for various key initiatives.
- Strategizes and plans the program(s) based on best practices and security frameworks.
- Supplements the traditional project team with higher level communications, awareness and relationship management.
- Outlines and facilitates change management
- Collects and communicates key metrics on program progress.
- Assists in resolving high level issues and outlines critical risks in key strategic programs.
- Develops and delivers the operational transition plans for the technology and platforms for Vulnerability Management.
Familiarity and work experience (required) leveraging NIST Moderate and CIS Controls that address Vulnerability and Asset Management (The NIST Framework for Improving Critical Infrastructure Cybersecurity calls out the CIS Controls as one of the “informative references” – a way to help users implement the Framework using an existing, supported methodology. Survey data shows that most users of the NIST Cybersecurity Framework also use the CIS Controls.
Responsibilities include:
Communication with Senior management including, but not limited to, DTMB’s Michigan Cyber Security (MCS), Infrastructure & Operations and Agency Services to implement the respective programs and develop integrated workplan for their organizations.
- Organize and chair the respective program Steering Committee
- Align, and work with, the EPMO Project Manager on process, deliverable and QA.
- Act as the MCS Lead for what is referred to as a cross-functional “Operational Excellence” (OpEx) program for year
Eliminate remediation deficit
Establish and refine scanning and remediation windows and processes
Establish and refine false positive reporting and close-out
Establish and refine reporting requirements and dashboards
Establish and refine Tenable platform requirements and configuration
Include bi-weekly “office hours” workshops for problem resolution
Questions:
1. The client plans to schedule IN PERSON ONLY interviews for this position the week of October 3rd. Please confirm your candidate will be available to interview any of those days if selected.
2. Have you set up and rolled out an enterprise Vulnerability Management (and Patch Management) Program at a large organization? If yes - please explain.
3 Have you instituted programs that comply with either NIST or the CIS controls that address Vulnerability and Asset Management specifically? If yes - please explain.
4. Have you set up and chaired an enterprise level Steering Committee? If yes - please explain.
5. Do you have experience presenting program status and metrics to executives? If yes - please explain.