Cybersecurity Specialist at MAGNUS Management Group LLC in PA

Job description

• We are seeking an experienced Cybersecurity Specialist to support our client. The selected candidate will provide cybersecurity program oversight for classified and unclassified environments, conduct compliance reviews and security assessments, support cybersecurity policy implementation, identify vulnerabilities and compliance gaps, and recommend improvements that strengthen NRLFO's cybersecurity posture.

Responsibilities

• Support implementation and management of classified and unclassified cybersecurity programs across assigned site offices.
• Ensure cybersecurity activities comply with applicable DOE/NNSA requirements, Federal requirements, and local Cyber Security Risk Management Program guidance.
• Develop, maintain, and implement cybersecurity policies, procedures, and long-range plans aligned with organizational and mission objectives.
• Interpret and apply national cybersecurity standards, directives, and requirements.
• Advise and train personnel on cybersecurity policies, procedures, standards, and secure operating practices.
• Plan, schedule, and lead cybersecurity compliance reviews and formal security surveys at NRLFO sites and contractor facilities.
• Evaluate information security programs by reviewing security policies, procedures, System Security Plans, technical controls, and supporting cybersecurity documentation.
• Identify vulnerabilities, security findings, compliance deficiencies, and cybersecurity risks.
• Document assessment and audit results and prepare formal reports containing findings, recommended improvements, and corrective actions.
• Lead or recommend cybersecurity and IT process-improvement initiatives.
• Develop practical solutions that strengthen security without unnecessarily affecting user productivity.
• Provide cybersecurity input to software-development or IT-enhancement initiatives.
• Maintain required cybersecurity program documentation, task tracking, status reports, and audit-ready records.
• Prepare weekly status reports identifying completed activities, outstanding tasks, risks, and recommended improvements.

Requirements

• Bachelor's degree from an accredited college or university in a relevant field and at least four years of directly relevant experience; OR Master's degree in a related field and at least two years of relevant experience.
• At least one year of specialized cybersecurity experience at or equivalent to the GS-12 level, demonstrating the ability to lead cybersecurity audits, compliance reviews, vulnerability assessments, or risk analyses and identify IT system vulnerabilities.
• Comprehensive knowledge of Federal cybersecurity laws, regulations, standards, and directives, including relevant DOE Orders, NNSA policies, DoD instructions, and Intelligence Community directives.
• Strong knowledge of cybersecurity compliance, risk management, security controls, vulnerability identification, and security documentation.
• Excellent verbal and written communication skills with the ability to present complex cybersecurity information and recommendations clearly to senior leadership.
• Ability to work independently, establish priorities, manage changing requirements, meet deadlines, and operate professionally within a high-visibility mission environment.
• Professional cybersecurity certification such as CISSP, CISM, or similar certification.
• Familiarity with software-design concepts, IT infrastructure, and multiple technical disciplines.
• Experience developing and implementing cybersecurity or IT policies and procedures.
• Experience preparing security plans, SOPs, organizational directives, or similar cybersecurity documentation.
• Demonstrated experience resolving complex cybersecurity issues and implementing process improvements.
• Strong stakeholder engagement, collaboration, and interpersonal skills.
• Ability to manage multiple projects and priorities through completion

Skills

Required

• Ability to work independently
• Ability to establish priorities
• Ability to manage changing requirements
• Ability to meet deadlines
• Cybersecurity compliance
• Risk management
• Security controls
• Vulnerability identification
• Security documentation
• Software-design concepts
• IT infrastructure

Benefits

• 401(k)
• Dental insurance
• Health insurance
• Paid time off
• Vision insurance
• Magnus Management Group offers a competitive, comprehensive benefits package, which includes:
• 3 Weeks Paid Time Off
• All Federal Holidays
• Medical, Dental, and Vision insurance
• 401K Retirement Plan
• Long Term Disability
• Tuition Reimbursement and Professional Development Support