Lead Information Security Engineer

The Lead Information Security Engineer is an essential member of the Industrial Security team, responsible for implementing the Risk Management Framework for systems that support public sector managed services clients.

Candidates must have a strong grasp of public sector information assurance, compliance standards, cyber threats, and security technologies. They should work well in teams, offer guidance on security strategies, and communicate technical issues clearly to diverse audiences.

• The successful candidate's resume and application should clearly demonstrate the candidate's ability to:
• Serve as ISSO for systems accredited under FedRAMP and FISMA.
• Advise ISSM and management on risk and security status.
• Collect and manage cybersecurity reporting data.
• Identify and implement necessary security improvements.
• Participate in cybersecurity inspections and assessments.
• Integrate cybersecurity needs into continuity planning.
• Evaluate how new technologies affect the IT security program.
• Monitor information security data sources to maintain organizational awareness.
• Conduct information security risk assessments as part of the Security A&A process.
• Help update cybersecurity plans and requirements.
• Provide cybersecurity requirements for statements of work and procurement documents.
• Coordinate prompt corrective actions for cybersecurity incidents or vulnerabilities.
• Track audit findings and ensure timely remediation.
• Establish remediation plans for vulnerabilities found during risk assessments, audits, or inspections.
• Stay current with relevant laws and compliance frameworks.

• Meticulous attention to detail.
• Verbal and written communication skills.
• Solving complex, nuanced problems.
• Exhibit the Lumen 8 behaviors: teamwork, trust, transparency, clarity, courage, customer focus, growth mindset, and respect.

Education and Experience:

• Bachelor's degree in information assurance or GRC, or equivalent experience.
• At least 5 years of relevant experience in information assurance is required.
• Demonstrates expertise in administering and implementing security controls at all organizational levels.
• Exceptional communication and collaboration skills, with experience conveying technical issues to diverse audiences.
• Must have current relevant certifications like CISSP, CGRC, CISA, or Security+.
• Proficient in technology, tools, and process management pertaining to GRC.

Security Requirements:

• US citizenship required.
• The capability to meet the suitability requirements for a GSA public trust position is required.

This information reflects the anticipated base salary range for this position based on current national data. Minimums and maximums may vary based on location. Individual pay is based on skills, experience and other relevant factors.

Location Based Pay Ranges:

$103,711 - $138,281 in these states: AL, AR, AZ, FL, GA, IA, ID, IN, KS, KY, LA, ME, MO, MS, MT, ND, NE, NM, OH, OK, PA, SC, SD, TN, UT, VT, WI, WV, and WY.
$108,896 - $145,195 in these states: CO, HI, MI, MN, NC, NH, NV, OR, and RI.
$114,082 - $152,109 in these states: AK, CA, CT, DC, DE, IL, MA, MD, NJ, NY, TX, VA, and WA.

Lumen offers a comprehensive package featuring a broad range of Health, Life, Voluntary Lifestyle benefits and other perks that enhance your physical, mental, emotional and financial wellbeing. We're able to answer any additional questions you may have about our bonus structure (short-term incentives, long-term incentives and/or sales compensation) as you move through the selection process.

Learn more about Lumen's:

• Benefits
• Bonus Structure

#LI-JS1