Information System Security Lead Consultant

Safal Partners is seeking an experienced Information System Security Lead to manage the security of a federal project website. Working as a 1099 consultant, you will own the website’s security compliance program from start to finish: continuous monitoring, Risk Management Framework (RMF) documentation, vulnerability management, access control, incident response, and contingency planning, all in line with ED Information Assurance Services requirements. This role suits a hands-on federal security professional who is comfortable with FedRAMP and CSAM, can keep ATO-related documentation current and audit-ready. The position requires an active U.S. Department of Education Public Trust certification., Compliance and Authorization

• Execute continuous monitoring tasks per ED Information Assurance Services requirements
• Maintain NIST and Risk Management Framework (RMF) compliance
• Develop and manage Plans of Action and Milestones (POA&Ms)
• Conduct annual self-assessments following ED protocols
• Monitor Authorization to Operate (ATO) status and renewals, as relevant
• Implement DHS Binding Operational Directive (BOD) requirements

Security Operations

• Conduct monthly vulnerability scans and remediation
• Oversee identity and access management systems
• Maintain secure access controls and user permissions
• Manage SSL certificate maintenance and updates

Incident Response and Continuity

• Lead security incident response planning and execution
• Coordinate annual tabletop exercises for the Incident Response Plan
• Track and document security incidents
• Maintain the Contingency Plan (CP) and disaster recovery procedures
• Ensure compliance with Recovery Time and Recovery Point Objectives (RTO/RPO)

Documentation and Reporting

• Manage system security documentation, including the System Security Plan (SSP)
• Maintain security documentation and compliance records
• Generate security assessment reports
• Update security-related standard operating procedures (SOPs)
• Optional: Support completion of required website/extranet paperwork

• U.S. Department of Education security clearance (Public Trust Certification) is required
• FedRAMP experience
• Cyber Security Assessment and Management (CSAM) experience, * CompTIA Security+ certification
• Certified in Governance, Risk and Compliance (CGRC, formerly CAP)
• Experience supporting federal contracts