Vulnerability Assessment Lead (Cybersecurity)

TL;DR

Vulnerability Assessment Lead (Cybersecurity): Leading enterprise vulnerability assessment and management operations for the NIH with an accent on risk-based prioritization and remediation. Focus on directing scanning activities across enterprise systems, ensuring FISMA/NIST compliance, and reducing overall cybersecurity risk.

Location: Remote (Must be based in the US and be able to obtain Public Trust clearance)

Company

hirify.global provides specialized IT and cybersecurity support services for US federal agencies, including the National Institutes of Health.

What you will do

• Lead enterprise vulnerability assessment and management operations, strategies, and priorities.
• Direct vulnerability scanning activities and analyze results across NIH enterprise systems.
• Coordinate remediation initiatives with technical teams and monitor SLA compliance.
• Perform root cause analysis and evaluate exploitability and business impact of vulnerabilities.
• Develop executive cybersecurity reports and track recurring trends.
• Support risk acceptance processes and continuously improve vulnerability management capabilities.

Requirements

• Public Trust Clearance or the ability to obtain and maintain one.
• 8+ years of experience leading vulnerability assessment or management programs.
• B.S. in Computer Science, Information Technology, or a related field.
• Proven experience with enterprise vulnerability scanning solutions and penetration testing.
• Deep knowledge of RMF, FISMA, and NIST guidance.
• Experience supporting Federal cybersecurity programs.