> Markdown version of [/jobs/ext/4620044-information-system-security-lead-consultant](https://www.wearedevelopers.com/jobs/ext/4620044-information-system-security-lead-consultant). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Information System Security Lead Consultant

- **Company:** Safal Partners
- **Location:** United States (Remote available)
- **Experience:** Expert
- **Contract:** Contract
- **Skills:** Cyber Security, Disaster Recovery, Extranet, Identity and Access Management, Information Security Management, Software Vulnerability Management, Information Security Management System
- **Published:** November 7, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=1dfb3891c0ac9140

## About the Role

* U.S. Department of Education security clearance (Public Trust Certification) is required
 * FedRAMP experience
 * Cyber Security Assessment and Management (CSAM) experience, * CompTIA Security+ certification
 * Certified in Governance, Risk and Compliance (CGRC, formerly CAP)
 * Experience supporting federal contracts

## Description

Safal Partners is seeking an experienced Information System Security Lead to manage the security of a federal project website. Working as a 1099 consultant, you will own the website's security compliance program from start to finish: continuous monitoring, Risk Management Framework (RMF) documentation, vulnerability management, access control, incident response, and contingency planning, all in line with ED Information Assurance Services requirements. This role suits a hands-on federal security professional who is comfortable with FedRAMP and CSAM, can keep ATO-related documentation current and audit-ready. The position requires an active U.S. Department of Education Public Trust certification., Compliance and Authorization

 * Execute continuous monitoring tasks per ED Information Assurance Services requirements
 * Maintain NIST and Risk Management Framework (RMF) compliance
 * Develop and manage Plans of Action and Milestones (POA&Ms)
 * Conduct annual self-assessments following ED protocols
 * Monitor Authorization to Operate (ATO) status and renewals, as relevant
 * Implement DHS Binding Operational Directive (BOD) requirements

Security Operations

 * Conduct monthly vulnerability scans and remediation
 * Oversee identity and access management systems
 * Maintain secure access controls and user permissions
 * Manage SSL certificate maintenance and updates

Incident Response and Continuity

 * Lead security incident response planning and execution
 * Coordinate annual tabletop exercises for the Incident Response Plan
 * Track and document security incidents
 * Maintain the Contingency Plan (CP) and disaster recovery procedures
 * Ensure compliance with Recovery Time and Recovery Point Objectives (RTO/RPO)

Documentation and Reporting

 * Manage system security documentation, including the System Security Plan (SSP)
 * Maintain security documentation and compliance records
 * Generate security assessment reports
 * Update security-related standard operating procedures (SOPs)
 * Optional: Support completion of required website/extranet paperwork