Manager of Cybersecurity Governance and Compliance

Description

Leidos Digital Modernization Sector has a career opportunity for a Manager of Cybersecurity Governance and Compliance to support the Air Force National Capital Region IT Services program.

The AFNCR IT Services program provides support services for information systems for Headquarters Air Force (HAF), Air Force District of Washington (AFDW), Office of the Secretary of Defense (OSD), Joint Chiefs of Staff, and other Air Force activities within the AFNCR, missions to include the Pentagon, Joint Base Andrews (JBA), Joint Base Anacostia-Bolling (JBAB), and other locations, leased spaces, and alternate sites. The major support areas required are IT Operations and Maintenance; Plans, Projects, and Engineering (PP&E); and National Military Command Center (NMCC). The senior leaders and national defense missions that are supported require that the AFNCR operations never fail, resulting in a fast-paced, challenging, but also rewarding environment.

If this sounds like the kind of environment where you can thrive, keep reading!

Leidos Digital Modernization Sector is focused on Delivering enterprise IT, digital modernization and cyber capabilities to meet critical Air Force, Space Force and Defense Agency operational and mission objectives.

Are you ready to make an impact? Begin your journey of a flourishing and meaningful career, share your resume with us today!

POSITION SUMMARY:
Leidos is seeking an experienced Manager of Cybersecurity Governance and Compliance to lead a team supporting the Air Force National Capital Region IT (AFNCRIT) program. This Management leadership role is responsible for managing the implementation of cybersecurity compliance programs, guiding RMF execution, driving POA&M resolution, overseeing STIG enforcement, and ensuring readiness for CCRI/CORA inspections.

The successful candidate will serve as the focal point for cybersecurity policy alignment, risk mitigation strategy, and inspection readiness across multiple enclaves and systems supporting critical Air Force missions.

Primary Responsibilities:

• Lead a cross-functional cybersecurity team responsible for executing CND governance and compliance functions including STIG enforcement, POA&M management, and RMF documentation.

• Oversee and validate continuous monitoring artifacts, scan compliance, and reporting outputs across unclassified and classified AFNCR networks.

• Act as the primary POC for cybersecurity compliance and readiness efforts related to CSSP actions.

• Collaborate with Queue Managers, ISSOs, Vulnerability Analysts, and Incident Response personnel to maintain real-time network defense compliance.

• Provide weekly and monthly metrics on overall CND health posture, unresolved vulnerabilities, waiver/exception status, and audit readiness.

• Lead a team of Leidos employees and sub-contractors. Responsible for defining the team's direction and ensure that individual and team goals align with the organization and customer mission.

• Provide guidance, support, and resources to help team members succeed and feel motivated to contribute their best work.

• Foster an environment of employee growth and development, promoting continuous learning and provide opportunities for skill enhancement.

• Responsible for team staffing activities, as well as addressing performance concerns, resolving disputes or disagreements within the team.

Basic Qualifications:

• Bachelor's degree in Cybersecurity, Information Systems, or related field (or equivalent experience) and 5+ years of experience in cybersecurity, with at least 2+ years in a team lead or managerial role.

• Possess a current DoD Secret or higher clearance.

• DoD 8570 IAM Level II or III certification (e.g., CAP, CISSP, CISM).

• Expert knowledge of AFMAN 17-130, NIST SP 800-53, and DISA STIGs.

• Strong background in CND functions such as scan validation, control assessments, inspection readiness, and audit remediation.

Preferred Qualifications:

• Experience supporting U.S. Air Force or Joint Service cybersecurity environments.

• Working knowledge of AFMAN 17-130, STIGViewer, and eMASS.

• Familiarity with compliance scoring systems (e.g., CORA, CCRI).

• Certifications such as CISSP, GCIH, GCFA, or Security+ CE.

• Experience with scripting (PowerShell, Python) to support reporting or detection logic.

For U.S. Positions: While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above.

The Leidos pay range for this job level is a general guideline onlyand not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.