Oversight and Governance Lead

SkyePoint Decisions is a leading Cybersecurity Architecture and Engineering, Critical Infrastructure and Operations, and Applications Development and Maintenance IT service provider headquartered in Dulles, Virginia with operations across the U.S. We provide innovative enterprise-wide solutions as well as targeted services addressing the complex challenges faced by our federal government clients. Our focus is on enabling our clients to deliver their mission most efficiently and effectively – anytime, anywhere, securely. We combine technical expertise, mission awareness, and an empowered workforce to produce meaningful results.

This is a contingent position based upon contract win.

SkyePoint Decisions is seeking an Oversight and Governance Lead to join our team supporting a federal customer. This position is contingent on contract win.

The Oversight and Governance (O&G) Lead plans and leads high-impact cybersecurity governance, assessment, audit, and quality activities supporting PWS 4.6, 5.4, and 5.5. Applying comprehensive cybersecurity knowledge across multiple assignments, the Lead coordinates Government and contractor stakeholders, evaluates program and control effectiveness, manages findings and corrective actions, maintains audit/quality readiness, and recommends improvements that strengthen compliance, performance, and mission assurance.

This is a remote position. 

Responsibilities:

• Lead periodic/annual O&G evaluations and assess alignment with NIST, OMB, and applicable Federal requirements across A&A/OSA, Common Controls, Vulnerability Management, Security Operations/SOC, DLP, and Zero Trust.
• Coordinate data calls, evidence/artifacts, system and configuration information, testing access, interviews, walkthroughs, and control assessments; evaluate program/control effectiveness and maintain complete, traceable, timely evidence.
• Drive vulnerabilities, findings, and gaps through remediation, validation, documentation updates, and closure; support continuous monitoring and recommend improvements based on recurring weaknesses and assessment results.
• Lead contractor support for IV&V, QA, LMM compliance, process reviews, system assessments/audits, management reviews, and other Government surveillance; coordinate requested information, personnel, facilities, quality-system documentation, and technical/management assistance.
• Maintain traceability of configuration items, baselines, and builds supporting LMM, Change Management, Configuration Management, and auditability; track review evidence, findings, owners, deadlines, and corrective actions.
• Coordinate timely responses, through authorized contractual channels, to external inquiries, studies, inspections, validations, and audits involving Congress, GAO, OMB, OIG, Departmental programs, and other authorized Federal entities.
• Lead implementation and maintenance of the Government-approved Quality Control Plan, including internal controls, service-evaluation responsibilities/methods/frequency, quality reporting, inspection records, performance-surveillance baselines, and continuous improvement.
• Maintain an inspection system acceptable to the Government and quality checks that support COR/CO oversight and tender only conforming services/deliverables for acceptance.
• Manage deficiencies and nonconforming work through root-cause analysis, permitted corrective action, repair/replacement or reperformance when directed, validation, documentation, and closure; maintain records supporting applicable FAR 52.246-4 inspection/post-acceptance actions.

Required Qualifications:

• Bachelor’s degree in Cybersecurity, Information Systems, Computer Science, Engineering, or related technical discipline.
• 5–10 years of relevant cybersecurity, information assurance, governance, assessment/authorization, audit/compliance, or quality-assurance experience.
• Senior industry professional certification such as CISSP or equivalent.
• Experience planning/leading major cybersecurity assignments and functioning as a technical expert across multiple high-impact activities.
• Knowledge of NIST controls/assessment practices, Federal RMF/A&A, OSA, continuous monitoring, vulnerability management, security operations, and remediation.
• Experience supporting Government cybersecurity assessments/audits, IV&V/QA/LMM reviews, configuration traceability, QCP/inspection processes, and findings/corrective-action management.
• Strong stakeholder coordination, technical writing, analysis, and briefing skills; ability to evaluate results, recommend significant improvements, and supervise supporting personnel as assigned.
• Ability to obtain a 6c Public Trust. At least an active Secret clearance is highly preferred.
• U.S. Citizenship is required.

Compensation:

Salary Range: TBD

The SkyePoint Decisions salary range for this position is a general guideline only. It represents an estimated range for this position and is just one piece of our total compensation package. 

Salary at SkyePoint is determined by various factors, including but not limited to location, work schedule, the candidate’s combination of education, knowledge, skills, competencies, and experience, as well as contract-specific affordability, market data and business considerations.

In addition to a competitive salary, SkyePoint offers benefits including a certification incentive program, PTO, floating federal holiday options, several insurance options including HMO and High Deductible plans with Health Savings Accounts [HSAs], Flex Spending Accounts [FSAs], Full Dental Plans, Vision, ST/LT Disability, Life Insurance, and 401k matched.

What We Can Offer You:

• At SkyePoint, we go B.I.G. (beginning in GRATITUDE) by recognizing all we have and giving back to our employees, families, and communities. It instills a positive mindset that permeates all we do. By beginning in gratitude, SkyePoint can continue to spread living in gratitude each day.
• Great Benefits: Several insurance options including HMO and High Deductible plans with Health Savings Accounts [HSAs], Flex Spending Accounts [FSAs], Full Dental Plans, ST/LT Disability, Life Insurance, floating federal holiday options, and 401k matched
• Certificate Incentive Program: To promote professional development, we recognize and reward employees who obtain new certifications aligned with business needs.
• Flexible Work Environment

SkyePoint Decisions is an established ISO 9001:2015 and ISO/IEC 27001:2013 certified small business and appraised at CMMI Level 3 for Services and Development. We possess a common vision of excellence and foster a collaborative team culture built upon individual performance and accountability. We invest in our people and systems to create value for our clients. It is the SkyePoint Way. We are grateful for the opportunity to work with exceptional people and give back to the communities we serve. Our employees value the flexibility at SkyePoint that allows them to balance quality work and their personal lives.

SkyePoint Decisions is a participating E-Verify Employer. 

U.S. Citizenship is required for most positions.

Equal Opportunity Employer/Veterans/Disabled.

CCPA Disclosure Notice Here