Cyber Security Lead

Position Title: Cyber Security Lead
Location: Remote

Other Considerations: U.S. Citizen or Permanent Resident (Required)

POSITION SUMMARY

We are seeking a Cyber Security Lead to join our team. In this role, you will provide strategic leadership for the programs cybersecurity initiatives while overseeing day-to-day security operations, compliance, risk management, and team performance. This role serves as the primary cybersecurity advisor to program leadership, ensuring the security posture aligns with federal requirements, operational objectives, and industry best practices. The ideal candidate is an experienced leader who can translate cybersecurity strategy into operational execution while building and developing a high-performing team

RESPONSIBILITIES

Strategic Cybersecurity Leadership

• Serve as the primary cybersecurity liaison for internal leadership, technical teams, customers, and external stakeholders.
• Define and execute the cybersecurity strategy, vision, priorities, and roadmap in alignment with organizational goals and federal security requirements.
• Partner with program leadership, engineering teams, and product owners to integrate cybersecurity into program planning and delivery.
• Foster a proactive security culture by promoting security awareness and collaboration across the organization.

Cybersecurity Operations

• Lead the daily operations of the cybersecurity team, ensuring efficient execution of security activities and operational priorities.
• Manage workload distribution, establish priorities, and monitor team performance to ensure timely, high-quality deliverables.
• Recruit, onboard, mentor, and develop cybersecurity professionals while fostering a collaborative, high-performing team environment.
• Conduct performance management, coaching, and career development to build organizational capability and support long-term growth.

Security Compliance, Risk Management & Governance

• Ensure compliance with applicable federal cybersecurity requirements, including NIST, FISMA, Authorization to Operate (ATO), VA policies, and other regulatory frameworks.
• Lead security assessments, risk analyses, threat modeling activities, and control evaluations to identify and mitigate organizational risk.
• Develop, maintain, and continuously improve cybersecurity policies, standard operating procedures (SOPs), incident response plans, and governance documentation.
• Oversee the tracking, validation, and documentation of corrective actions to ensure timely risk mitigation and audit readiness.

Vulnerability Management & Security Operations

• Direct enterprise vulnerability management activities, including identification, prioritization, remediation coordination, and validation of security findings.
• Collaborate with technical teams to ensure vulnerabilities are remediated within established service-level objectives and compliance timelines.
• Monitor the effectiveness of security controls and operational processes, identifying opportunities to strengthen the organization's cybersecurity posture.
• Drive continuous process improvement through operational efficiencies, automation, and implementation of security best practices.

Performance Reporting & Continuous Improvement

• Establish and maintain cybersecurity metrics, dashboards, and key performance indicators (KPIs) to measure program effectiveness.
• Prepare executive-level reports and briefings that communicate cybersecurity posture, operational performance, compliance status, and emerging risks.
• Analyze operational trends to identify improvement opportunities and recommend strategic initiatives that enhance cybersecurity maturity.
• Champion continuous improvement by evaluating new technologies, optimizing processes, and supporting ongoing analyst training and professional development.

QUALIFICATIONS

• Must be able to obtain and maintain the appropriate VA background investigation and PIV credential required to perform the role
• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Information Systems, or a related field (or equivalent combination of education and experience) and additional relevant experience may be substituted for education in accordance with contract guidelines
• Minimum of 5-8 years of progressive cybersecurity experience, including leadership or supervisory responsibilities
• Demonstrated experience implementing and managing cybersecurity programs aligned with NIST, FISMA, and ATO requirements
• Demonstrated ability to communicate effectively with technical teams, stakeholders, and leadership, including presenting cyber status, risks, and recommendations
• Strong leadership, communication, and stakeholder management skills with the ability to engage technical and executive audiences
• Experience developing policies, procedures, operational playbooks, and executive reporting.
• Demonstrated ability to coordinate across cross-functional teams and drive alignment on security priorities and execution

Required Certifications

• Professional cybersecurity certifications such as CISSP, CISM, Security +, or equivalent.

WORKING CONDITIONS

Standard Business hours are Monday through Friday. Occasional extended or weekend hours may be required based on operational needs. Must have reliable internet service that allows for effective telecommuting.

PAY RANGE

The base salary range for this position is $120,000 to $140,000 annually, depending on geographic work location, relevant experience, skills, education, internal equity, security clearance, and contract requirements. Geographic salary ranges are determined in accordance with the company's compensation practices and represent a good-faith estimate of the compensation for this position at the time of posting.

BENEFITS

Sprezzatura offers a comprehensive and flexible benefit package to include:

• Medical, Dental, and Vision
• Health Saving Account (when enrolled in eligible plan) with Company contribution
• Company paid Life, Accidental Death, Short-term & Long-term Disability
• Voluntary Accident, Hospital Indemnity, & Critical Care Insurance
• Voluntary Medical & Dependent Care Flexible Spending Accounts
• Accrued Paid Time Off & Company Paid Holidays
• 401(k) Retirement Plan with Company match

WORK AUTHORIZATION

Sprezzatura participates in E-Verify and will provide the federal government with your I-9 information to confirm that you are authorized to work in the U.S.

Sprezzatura is a mission-driven, Service-Disabled Veteran-Owned Small Business (SDVOSB) that thrives at the intersection of technology, innovation, and impact. We specialize in secure, scalable, and human-centered digital solutions that accelerate government transformation. Our work spans DevSecOps, health IT modernization, intelligent automation, benefits delivery, and digital communications. We partner with agencies ready to evolve-delivering not just strategy, but measurable execution. Rooted in operational excellence and driven by curiosity, we help our clients navigate complexity with clarity-turning ambitious ideas into real-world outcomes. No buzzwords. Just impact.

EEO STATEMENT

Sprezzatura is an Equal Opportunity Employer. We do not discriminate on the basis of race, color, religion, sex (including pregnancy, sexual orientation, and gender identity), national origin, age, disability, genetic information, protected veteran status, or any other legally protected characteristic. Applicants have the right to discuss, disclose, or inquire about compensation without retaliation. Reasonable accommodations are available for qualified individuals with disabilities.

This job description is not intended to be an employment contract and does not guarantee employment for any specific duration.