{"id":3887252,"url":"https://alion.io/job/skyepoint-decisions-cybersecurity-lead","title":"Cybersecurity Lead","company":{"id":686792,"name":"SkyePoint Decisions","domain":"skyepointdecisions.com","url":"https://alion.io/company/skyepointdecisions","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":null},"role":"Security","role_family":"Security","seniority":"lead","employment_type":null,"work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"posting_text","remote_working_hours":null,"hiring_geo_confidence":"inferred","locations":[],"countries":[],"hiring_countries":["US"],"hiring_countries_total":1,"salary":null,"salary_estimate":null,"experience_years_min":10,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[],"status":"live","first_seen_at":"2026-11-06T16:10:43Z","employer_posted_date":"2026-11-06","last_verified_at":"2026-11-09T11:29:53Z","board_verified":true,"closed_at":null,"days_open":2,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":2},"description":"SkyePoint Decisions is a leading Cybersecurity Architecture and Engineering, Critical Infrastructure and Operations, and Applications Development and Maintenance IT service provider headquartered in Dulles, Virginia with operations across the U.S. We provide innovative enterprise-wide solutions as well as targeted services addressing the complex challenges faced by our federal government clients. Our focus is on enabling our clients to deliver their mission most efficiently and effectively - anytime, anywhere, securely. We combine technical expertise, mission awareness, and an empowered workforce to produce meaningful results.\nThis is a contingent position based upon contract win. \nSkyePoint Decisions is seeking a Cybersecurity Lead to join our team supporting the Department of Education’s (DoED) Federal Student Aid (FSA) Cybersecurity and Privacy Support Services (CPSS). \nThe Senior Institutions of Higher Education (IHE) Cybersecurity Lead provides senior technical, operational, and program leadership for FSA cybersecurity activities supporting Institutions of Higher Education that handle Federal Student Aid data. The Lead oversees and coordinates IHE cybersecurity compliance, breach and incident response, cyber risk management, remediation, audit oversight, technical guidance, and education-sector outreach. The position serves as a senior cybersecurity resource supporting FSA and participating institutions in protecting sensitive Federal information and addressing cybersecurity risks involving Controlled Unclassified Information (CUI), Federal Tax Information (FTI), and Personally Identifiable Information (PII).\nThis is a remote position. \nResponsibilities:\nIHE Cybersecurity Program Leadership\nProvide senior technical and operational leadership for cybersecurity activities supporting IHEs that handle FSA information.\nCoordinate activities across the four primary FSA IHE cybersecurity workstreams:\nBreach Response & Remediation\nCybersecurity Compliance & Audit Oversight\nCybersecurity Threat Risk Management\nCommunication Support & Education Sector Outreach\nCoordinate cybersecurity activities among FSA offices, FSA contractors, IHEs, and affiliated organizations.\nAchieve reporting and transparency metrics, to include compliance reporting, dashboard accuracy, and communication responsiveness.\nAchieve customer and stakeholder experience metrics, including stakeholder satisfaction, governance participation, and speed of access request fulfillment.\nProvide senior-level cybersecurity guidance to FSA stakeholders and participating institutions.\nPromote consistency and quality across compliance assessments, incident response, risk management, remediation, and cybersecurity outreach activities.\nIncident & Breach Response\nLead and coordinate incident-response and breach-management support for IHEs handling FSA information.\nProvide incident reporting and handling guidance to help IHEs appropriately contain, remediate, and recover from cybersecurity incidents.\nCoordinate remediation and response activities with reporting institutions.\nOversee the categorization, analysis, documentation, tracking, and management of IHE cybersecurity cases through closure.\nCoordinate breach-response activities involving affected FSA offices, contractors, IHEs, and affiliated organizations.\nEvaluate incident information to identify cybersecurity risks, compliance concerns, and necessary remediation actions.\nMonitor corrective actions and remediation activities through resolution.\nCybersecurity Compliance & Assessment\nLead and support cybersecurity compliance assessments of institutions and systems that handle FSA data.\nEvaluate the adequacy of administrative, technical, and physical safeguards and identify cybersecurity and compliance gaps.\nOversee development of assessment plans addressing methodology, data collection, sampling, reporting timelines, and risk-rating methodology.\nEvaluate the existence and effectiveness of institutional information-security programs.\nReview cybersecurity compliance and audit information and assess corrective-action plans.\nEvaluate safeguards related to:\nRisk assessment\nIdentity and access management\nData classification and inventory\nEncryption of data in transit and at rest\nMulti-factor authentication\nChange management and secure development\nLogging, monitoring, and incident response\nVendor and third-party risk\nCybersecurity awareness and training\nGovernance, Regulatory Compliance & Risk Management\nProvide subject-matter expertise in interpreting cybersecurity and information-protection requirements applicable to institutions handling FSA data.\nSupport implementation and interpretation of GLBA, NIST SP 800-53, NIST SP 800-171, OMB A-130, and ED/FSA cybersecurity requirements.\nIdentify cybersecurity risks, compliance deficiencies, and control weaknesses affecting the protection of FSA information.\nProvide actionable risk-mitigation and remediation recommendations.\nSupport IHE corrective-action planning and track identified issues toward resolution.\nEnsure assessment and incident-response work products meet applicable Departmental data-handling and CUI protection requirements.\nSupport risk-management strategies associated with GLBA audit activities.\nIHE Cybersecurity Advisory & Outreach\nProvide cybersecurity consulting, threat advisories, and remediation support to Title IV institutions.\nServe as a senior cybersecurity resource for IHEs addressing significant cybersecurity risks, compliance issues, incidents, and remediation challenges.\nSupport cybersecurity awareness campaigns tailored to threats affecting the education sector.\nSupport cybersecurity tabletop exercises with participating IHEs.\nProvide technical input supporting information security, privacy, outreach, and communication activities.\nCollaborate with FSA communications and cybersecurity stakeholders on outreach initiatives that help institutions understand cybersecurity risks and protective measures.\nRequired Qualifications:\nBachelor’s degree in Cybersecurity, Information Security, Information Technology, Computer Science, Information Assurance, Information Systems, Engineering, or a related discipline; equivalent relevant experience may be considered where permitted.\n10+ years of cybersecurity experience, with experience in areas such as cybersecurity leadership, incident response, cybersecurity compliance, security assessments, risk management, or Federal information security.\nSenior industry professional certification such as a CISSP or equivalent.\nMust be able to get a 6c Public Trust. An active Secret level clearance or above is preferred.\nDemonstrated experience leading or coordinating complex cybersecurity activities across multiple stakeholder groups.\nExperience with cybersecurity compliance assessments, incident response, risk management, and remediation.\nKnowledge of GLBA, NIST SP 800-53, NIST SP 800-171, and applicable Federal cybersecurity requirements.\nExperience assessing security controls and identifying administrative, technical, and physical cybersecurity deficiencies.\nExperience advising stakeholders on corrective actions and cybersecurity remediation strategies.\nAbility to analyze complex cybersecurity incidents, risks, assessment findings, and compliance issues.\nStrong leadership, technical writing, analytical, communication, presentation, and stakeholder-management skills.\nU.S. Citizenship is required. \nCompensation:\nSalary Range: TBD\nThe SkyePoint Decisions salary range for this position is a general guideline only. It represents an estimated range for this position and is just one piece of our total compensation package. \nSalary at SkyePoint is determined by various factors, including but not limited to location, work schedule, the candidate’s combination of education, knowledge, skills, competencies, and experience, as well as contract-specific affordability, market data and business considerations.\nIn addition to a competitive salary, SkyePoint offers benefits including a certification incentive program, PTO, floating federal holiday options, several insurance options including HMO and High Deductible plans with Health Savings Accounts [HSAs], Flex Spending Accounts [FSAs], Full Dental Plans, Vision, ST/LT Disability, Life Insurance, and 401k matched.\nWhat We Can Offer You:\nAt SkyePoint, we go B.I.G. (beginning in GRATITUDE) by recognizing all we have and giving back to our employees, families, and communities. It instills a positive mindset that permeates all we do. By beginning in gratitude, SkyePoint can continue to spread living in gratitude each day.\nGreat Benefits: Several insurance options including HMO and High Deductible plans with Health Savings Accounts [HSAs], Flex Spending Accounts [FSAs], Full Dental Plans, ST/LT Disability, Life Insurance, floating federal holiday options, and 401k matched\nCertificate Incentive Program: To promote professional development, we recognize and reward employees who obtain new certifications aligned with business needs.\nFlexible Work Environment\nSkyePoint Decisions is an established ISO 9001:2015 and ISO/IEC 27001:2013 certified small business and appraised at CMMI Level 3 for Services and Development. We possess a common vision of excellence and foster a collaborative team culture built upon individual performance and accountability. We invest in our people and systems to create value for our clients. It is the SkyePoint Way. We are grateful for the opportunity to work with exceptional people and give back to the communities we serve. Our employees value the flexibility at SkyePoint that allows them to balance quality work and their personal lives.\nSkyePoint Decisions is a participating E-Verify Employer. \nU.S. Citizenship is required for most positions.\nEqual Opportunity Employer/Veterans/Disabled.\nCCPA Disclosure Notice Here","description_format":"text","description_chars":9844,"description_truncated":false,"requirements":{"experience_years_min":10,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":true,"languages":[]},"benefits":["401k plan","Flexible schedule","Life insurance","Professional development"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Security","IT Consulting & Digital Transformation"],"lifecycle":[{"event":"open","at":"2026-11-06T20:02:25Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":2,"expected_fill_days":30,"reasons":["conf:3","velocity","win:early"],"computed_at":"2026-11-09T06:03:00Z"},"pay":null,"html_url":"https://alion.io/job/skyepoint-decisions-cybersecurity-lead","json_url":"https://alion.io/job/skyepoint-decisions-cybersecurity-lead.json","meta":{"generated_at":"2026-11-09T13:49:18Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":18435,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-10T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":686792},"rest":"https://alion.io/mcp/rest/get_company?id=686792"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fskyepoint-decisions-cybersecurity-lead"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fskyepoint-decisions-cybersecurity-lead"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fskyepoint-decisions-cybersecurity-lead"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/skyepoint-decisions-cybersecurity-lead\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fskyepoint-decisions-cybersecurity-lead"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3887252}},{"tool":"search_jobs","arguments":{"company":"skyepointdecisions.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3887252},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}