Senior Cybersecurity Advisor (Expert/Master)

DCCA is a veteran-owned IT business specializing in providing innovative solutions to a variety of government agencies and commercial enterprises since 1982.  DCCA is proud to offer career growth opportunities and a competitive compensation and benefits package.  Visit our website at: www.dcca.com

Senior Cybersecurity Advisor (Expert/Master)

Candidate must have a TS/SCI

For over 40 years, DCCA has provided a broad range of IT services to government agencies and commercial enterprises, helping them to feel confident in their IT infrastructure. With DCCA, these organizations can be confident in the flexibility and skill of their IT partners, allowing them to upgrade their technology quickly and efficiently. Better yet, thanks to DCCA’s successful track record, clients can rest assured knowing DCCA can tackle any problem with ease, allowing them to focus on the work that matters.

Internally, DCCA prides itself on a culture built on integrity and inclusivity, allowing its employees to build lasting skills and relationships. As a veteran owned business, DCCA knows the importance of recruiting employees with a wide range of backgrounds, allowing for every problem to be approached by a diverse array of perspectives. Join us and be part of a team that has a people first mentality and a dedication to excellence.

We are seeking an experienced Senior Cybersecurity Advisor to provide executive-level cybersecurity leadership in support of enterprise security strategy, governance, risk management, and compliance initiatives. The successful candidate will serve as a trusted advisor to senior leadership, guiding cybersecurity policy, Zero Trust implementation, RMF/ATO activities, DevSecOps integration, and enterprise security modernization efforts across complex government environments.

This position requires extensive experience working with executive stakeholders to develop cybersecurity strategies that align mission objectives with federal security requirements while enhancing the organization's overall cybersecurity posture.

Key Responsibilities

Cybersecurity Strategy & Governance

•     Advise executive leadership on enterprise cybersecurity strategy, governance, and policy development.

•     Develop cybersecurity priorities aligned with organizational mission objectives and federal requirements.

•     Recommend governance improvements that strengthen enterprise security and operational resilience.

•     Provide executive-level briefings, metrics, and strategic recommendations.

Risk Management & Compliance

•     Lead Risk Management Framework (RMF) implementation and Authorization to Operate (ATO) activities.

•     Support continuous monitoring, security authorization, and compliance initiatives.

•     Improve ATO processes and promote reciprocity across enterprise systems.

•     Develop and maintain cybersecurity policies, standards, and implementation guidance.

Zero Trust & Security Architecture

•     Advise on Zero Trust architecture, planning, and implementation.

•     Provide guidance on:

o    Identity and Access Management (IAM)

o    Network segmentation

o    Encryption

o    Secure access solutions

•     Ensure security architectures align with NIST and federal cybersecurity standards.

Incident & Vulnerability Preparedness

•     Provide strategic guidance for:

o    Incident response planning

o    Vulnerability management

o    Security Operations Center (SOC) operations

o    Security Information and Event Management (SIEM) capabilities

•     Recommend improvements to enterprise cyber defense and operational readiness.

DevSecOps & Secure Engineering

•     Integrate cybersecurity throughout the system development lifecycle.

•     Advise acquisition teams on security-by-design principles.

•     Support DevSecOps implementation and secure software development practices.

•     Collaborate with engineering teams to embed cybersecurity into modern cloud and software architectures.

Executive Reporting

•     Develop executive dashboards, cybersecurity metrics, and strategic reports.

•     Present cybersecurity risk assessments and recommendations to senior executives.

•     Coordinate cybersecurity initiatives across multiple organizations and stakeholders.

Required Qualifications

Experience

•     Experience advising executive leadership on:

o    Enterprise cybersecurity strategy

o    Governance

o    Risk management

o    Enterprise security modernization

•     Strong knowledge of:

o    Risk Management Framework (RMF)

o    NIST Cybersecurity Framework (CSF)

o    NIST SP 800-53

o    Zero Trust Architecture

o    Identity and Access Management (IAM)

•     Experience improving Authorization to Operate (ATO) processes and promoting reciprocity.

•     Experience developing cybersecurity policies, standards, and implementation guidance.

Desired Qualifications

•     Experience overseeing:

o    Incident Response

o    Vulnerability Management

o    Security Operations Centers (SOC)

o    Security Information and Event Management (SIEM)

•     Experience integrating cybersecurity into acquisition and systems engineering processes.

•     Experience implementing Security-by-Design and DevSecOps practices.

•     Experience briefing executive leadership and coordinating initiatives across multiple organizations.

•     Strong communication and leadership skills with the ability to influence senior decision-makers.

Education & Experience Requirements

Education - Minimum Years of Relevant Experience

Master's Degree in Business or STEM - 6 Years

Bachelor's Degree in Business or STEM - 8 Years

High School Diploma or Equivalent    - 12 Years

Preferred Technical Knowledge

Candidates should demonstrate knowledge of:

•           NIST Cybersecurity Framework (CSF)

•           NIST SP 800-53

•           Risk Management Framework (RMF)

•           Authorization to Operate (ATO)

•           Continuous Monitoring (ConMon)

•           Zero Trust Architecture

•           Identity, Credential, and Access Management (ICAM)

•           DevSecOps

•           Security-by-Design

•           Vulnerability Management

•           Incident Response

•           SOC/SIEM Operations

•           Enterprise Risk Management

•           Cybersecurity Governance

•           Federal Information Security policies and guidance

Key Competencies

•           Executive Leadership

•           Strategic Thinking

•           Cyber Risk Management

•           Enterprise Security Architecture

•           Policy Development

•           Regulatory Compliance

•           Cross-Functional Collaboration

•           Executive Communication

•           Problem Solving

•     Decision Making

•     Mission Focus

•     Customer Engagement

Clearance

Required: Active TS/SCI security clearance.

Ideal Candidate

The ideal candidate is a senior cybersecurity leader with a proven track record of advising executive leadership on enterprise cybersecurity strategy, governance, and risk management. They possess deep expertise in RMF, Zero Trust, DevSecOps, and federal cybersecurity compliance, while demonstrating the ability to influence strategic decisions, lead cross-functional initiatives, and drive continuous improvement across complex enterprise environments. 

The proposed salary range for this position in Maryland is 128,000 to 270,000. Final salary will be determined based on various factors. Our comprehensive benefit offerings include healthcare, retirement plan, paid disability and life insurance programs, employee assistance program, paid and unpaid leave programs, education assistance, and wellness initiatives.

At DCCA, we believe the key to providing our clients with unrivaled services starts with retaining top talent, something we’re able to do through our consistent commitment to building culture and comprehensive benefits.

Competitive Compensation: While salary at DCCA is determined by various factors, we are committed to making sure our salaries reflect the skill and expertise of our employees. In addition, each year we perform an annual salary review ensuring pay is equitable across both the company and industry at large.

Growth Opportunities: DCCA makes it a priority to help you grow and support your career advancement. From upskilling programs to recertification support, to professional development opportunities, we’re here to help you grow your career and create lasting relationships.

Emphasis on Inclusivity: DCCA’s culture emphasizes respect, equity, and opportunity and is supported by an array of business resource groups and other opportunities for connection.

Empowering Health: DCCA’s benefits which encompass healthcare, paid time off, and flexible 401(k) options encourage you to live a healthy and fulfilling life, both in and outside of work. Learn more about our total benefits package on our Benefits page.

Mission Focused Work: From the defense industry to health IT management, DCCA allows you to work on innovative projects whose outcomes improve people's lives and solve today’s IT problems.

Equal Opportunity Employer including Disability/Vets