Senior Data Security Consultant

Senior Data Security Lead

The Senior Data Security Lead supports the development of the data protection strategy for the agency's systems, applications, and networks, and acts as the lead subject matter expert (SME) for all data pillar activities. This position is responsible for supporting the implementation and maintenance of robust security controls to ensure the confidentiality, integrity, and availability of mission-critical data assets. The lead guides a team of cybersecurity professionals and works closely with IT and business units to mitigate risks and maintain compliance with all federal cybersecurity policies and regulations.

What You Will Do:

• Lead the development and implementation of zero trust data protection strategies, including encryption, tokenization, and data masking techniques to secure sensitive government data across networks and repositories.
• Design and support the management of identity-centric access controls, defining granular permissions and enforcing least privilege access to government data, aligning with zero trust principles.
• Coordinate and support the secure data lifecycle management practices, including data classification, data retention policies, and secure disposal procedures, integrated with zero trust data protection measures.
• Ensure data security measures align with federal cybersecurity regulations, policies, and frameworks (e.g., NIST, FISMA), conducting data security audits and assessments to maintain compliance within government data environments.
• Support the end-to-end engineering of platform security solutions, including the implementation of controls for identity and access management (IAM), data loss prevention (DLP), encryption, and secrets management.
• Develop, implement, and enforce data security policies, standards, and procedures in alignment with federal guidelines, including FISMA, NIST SP 800-53, and the RMF.
• Act as the SME for the implementation of security measures such as encryption and data masking to safeguard sensitive information.
• Promote security awareness across the agency by providing training and guidance to employees on best practices for data security.
• Work with internal and external stakeholders, such as system owners, external auditors, and other federal agencies like CISA, to coordinate security activities and ensure compliance.
• Define and track key performance indicators (KPIs) and metrics to demonstrate the effectiveness of security controls and overall compliance status.

What You Will Need:

• An active and current secret federal security clearance.
• Bachelor's degree and nine (9) years of progressive experience in federal cybersecurity, with a strong background in program management, compliance, and risk management OR a master's degree and seven (7) years of relevant experience.
• In-depth knowledge of data classification standards, including Federal Information Processing Standard (FIPS) 199 - Standards for Security Categorization of Federal Information and Information Systems, and NIST RMF and special publications specific to data classification (e.g., SP 800-60 SP 800-53, SP 800-171 and SP 1800-39A).
• Excellent verbal and written communication skills, specifically in report writing.

What Would Be Nice To Have:

• One or more of the following certifications: ISC2 Zero Trust Strategy Certificate, Certified Information Systems Security Professional (CISSP), Certified Authorization Professional (CAP), now part of the Certified in Governance, Risk and Compliance (CGRC), Certified Information Security Manager (CISM).
• Experience working for or with the Department of State or another large federal agency.
• Demonstrated experience in the areas of external client-facing management and/or consulting for large firms.
• Experience consulting federal agencies on implementing zero trust requirements.
• Extensive knowledge with security tools such as SIEM, DLP, and endpoint detection and response (EDR).

The annual salary range for this position is $130,000.00-$216,000.00. Compensation decisions depend on a wide range of factors, including but not limited to skill sets, experience and training, security clearances, licensure and certifications, and other business and organizational needs.

What We Offer:

Guidehouse offers a comprehensive, total rewards package that includes competitive compensation and a flexible benefits package that reflects our commitment to creating a diverse and supportive workplace.

• Medical, Rx, Dental & Vision Insurance
• Personal and Family Sick Time & Company Paid Holidays
• Position may be eligible for a discretionary variable incentive bonus
• Parental Leave and Adoption Assistance
• 401(k) Retirement Plan
• Basic Life & Supplemental Life
• Health Savings Account, Dental/Vision & Dependent Care Flexible Spending Accounts
• Short-Term & Long-Term Disability
• Student Loan PayDown
• Tuition Reimbursement, Personal Development & Learning Opportunities
• Skills Development & Certifications
• Employee Referral Program
• Corporate Sponsored Events & Community Outreach
• Emergency Back-Up Childcare Program
• Mobility Stipend

About Guidehouse:

Guidehouse is an Equal Opportunity EmployerProtected Veterans, Individuals with Disabilities or any other basis protected by law, ordinance, or regulation.

Guidehouse will consider for employment qualified applicants with criminal histories in a manner consistent with the requirements of applicable law or ordinance including the Fair Chance Ordinance of Los Angeles and San Francisco.

If you have visited our website for information about employment opportunities, or to apply for a position, and you require an accommodation, please contact Guidehouse Recruiting at 1-571-633-1711 or via email at RecruitingAccommodation@guidehouse.com. All information you provide will be kept confidential and will be used only to the extent required to provide needed reasonable accommodation.

All communication regarding recruitment for a Guidehouse position will be sent from Guidehouse email domains including @guidehouse.com or guidehouse@myworkday.com. Correspondence received by an applicant from any other domain should be considered unauthorized and will not be honored by Guidehouse. Note that Guidehouse will never charge a fee or require a money transfer at any stage of the recruitment process and does not collect fees from educational institutions for participation in a recruitment event. Never provide your banking information to a third party purporting to need that information to proceed in the hiring process.

If any person or organization demands money related to a job opportunity with Guidehouse, please report the matter to Guidehouse's Ethics Hotline. If you want to check the validity of correspondence you have received, please contact recruiting@guidehouse.com. Guidehouse is not responsible for losses incurred (monetary or otherwise) from an applicant's dealings with unauthorized third parties.

Guidehouse does not accept unsolicited resumes through or from search firms or staffing agencies. All unsolicited resumes will be considered the property of Guidehouse and Guidehouse will not be obligated to pay a placement fee.