Cybersecurity Project Advisor

Oceaneering Technologies (OTECH) develops, manufactures, and operates customized marine systems, shipboard equipment, subsea vehicles, and engineered solutions for commercial and U.S. military vessels.

Oceaneering Aerospace and Defense Technologies (AdTech) delivers solutions that enable humans to work safely and effectively in harsh environments - from underwater to the outer reaches of space. Our innovative solutions support the development and application of practical, cost-effective systems that meet our customers' challenges - from routine to extreme. Our experience and expertise across multiple industries uniquely positions us as a leader in the government, space, and maritime services markets. Our products and services meet the rigorous demands of the complex environments in which they operate, delivering results without compromising safety or reliability.

Oceaneering is a global provider of engineered services and products, primarily to the offshore energy industry. We develop products and services for use throughout the lifecycle of an offshore oilfield, from drilling to decommissioning. We operate the world's premier fleet of work class ROVs. Additionally, we are a leader in offshore oilfield maintenance services, umbilicals, subsea hardware, and tooling. We also use applied technology expertise to serve the defense, entertainment, material handling, aerospace, science, and renewable energy industries.

The Cybersecurity Project Advisor will manage and coordinate cybersecurity efforts across the lifecycle of assigned projects under the direction of a Cybersecurity Program Manager and program leads. This role is essential in integrating cybersecurity measures into program objectives while fostering collaboration among business units, stakeholders, and technical teams. The Advisor will serve as the central point of contact, aligning cybersecurity strategies with business goals, mitigating risks, and driving efficient program execution. The Cybersecurity Project Advisor will interact with OTECH personnel and customers to guide Cyber engineering efforts that meet client requirements. Leveraging their expertise, the Advisor will develop and implement solutions to defend against threats. They will also provide guidance on accreditation documentation from subcontractors and contribute to design meetings to define cybersecurity requirements.
This position requires a minimum of: Active Secret clearance with CI Poly.

CYBER SECURITY:

• Cyber Risk Analyst: This role would focus on conducting CTT exercises to identify system vulnerabilities, categorize risks, and assess mission impacts. They would use the insights gained to prioritize cybersecurity measures and allocate resources effectively.
• Compliance Officer: This role would ensure that the findings from CTT exercises align with regulatory requirements and organizational policies. They would oversee the implementation of recommended changes to maintain compliance.
• Training Coordinator: Responsible for developing, collaborating, and delivering training programs based on CTT findings. This includes educating operators, defenders, and maintainers on identified vulnerabilities and best practices for mitigation.
• Supply Chain Risk: Focused on addressing vulnerabilities in components and interfaces identified during CTT exercises. They would collaborate with SCM personnel to enhance supply chain security and resilience.
• Incident Response Planner: This role would use CTT scenarios to refine incident response protocols, ensuring the organization is prepared to handle cyber threats effectively.
  

PROJECTS/SUBCONTRACT MANAGEMENT:

Contribute to the project as the Cybersecurity Control Account Management (CAM) in project management is a critical function within an Earned Value Management System (EVMS). It can be summarized into the role of a Control Account Manager (CAM), who is responsible for the following:

• Scope Management: Defining and managing the scope of work within the control account, ensuring alignment with the project's Work Breakdown Structure (WBS).
• Schedule Oversight: Developing and maintaining schedules for tasks within the control account, including monitoring progress and addressing variances.
• Budget Control: Establishing and managing budgets for the control account, tracking costs, hours, and ensuring financial accountability.
• Performance Monitoring: Measuring technical performance and earned value, analyzing variances, and implementing corrective actions as needed.
• Risk Management: Identifying, reporting, and mitigating risks associated with the control account to ensure successful project delivery.
• Coordination and Communication: Collaborating with project teams, stakeholders, and other departments to ensure seamless execution of tasks within the control account.

ESSENTIAL SKILLS:

• Evaluate cybersecurity requirements and implement into necessary processes and systems.
• Characterize cyberattacks surface.
• Assist in performing continuous monitoring tasks and prepare documentation for assigned systems in support of Authorizations to Operate (ATOs).
• Perform Security control assessments as part of Continuous Monitoring NIST SP 800-53 V5 compliance sustainment for application, infrastructure, and network.
• Assist in the development, documentation, and support of user training plan(s).
• Advise on Risk Management Framework (RMF) compliance tasks/documents (security assessment plan, etc.)
• Security configuration management (assess planned services for risk and impact)
• Assist in the design, development, and implementation of system security measures, or countermeasures (Hardware/Software) that meets system requirements.
• Displays excellent technical judgment, attention to detail, and ability to look at the "big picture" in system design.
• Prepares reports and presents results to management and client.
• Responsible for letters of volatility, clearing procedures, addressing new cyber issues caused by obsolescence/system upgrades.
• Contacts vendors for information on data stored/contained on devices.
• Provide link between systems, software, electrical, ILS and cyber groups at Oceaneering to promote cyber security.
• Introduce innovative design concepts to achieve optimal cyber system security.
• Craft engineering decisions to be NIST compliant across all disciplines.
• Understanding of cyber risks and vulnerabilities and ability to appropriately convey concerns to program management, lead engineers and customers.
• Participation in government audits.

ADDITIONAL :

• Additional duties as assigned.
  

REQUIRED:

• BS degree in Cybersecurity, Electrical, Computer Science, Mechanical or Systems Engineering is desired as a base. Comparable experiences will be considered.
• 5+ years of practical experience in Cybersecurity ISSO functions.
• Specialized certification and compliance in accordance with DoD 8570.1M. Candidate must achieve certification within 6 months of assignment (MCSE, A+, CISCO, Security +, CISSP for assignment as IAT level I or II). As a condition of privileged access to any information system, personnel performing IA functions must satisfy both preparatory and sustaining DoD IA training and certification requirements in accordance with DoD 8570.1M. All candidates for this position must be able to pass and maintain required training.
• Basic familiarity with Project Management.
• Basic familiarity with RMF and ATO processes.
• Familiarity with ICD 503, DoD 8570.1M.
• Familiarity with certifications under the RMF, and a proven ability to perform continuous management activities.
• Working knowledge of current communications devices and protocols, and server and desktop technologies.
• Familiarity with auditing processes.
• Facilitation and change management skills.
• Ability to interact with personnel from other engineering and technical disciplines both inside and outside of the company, including systems engineers, electrical engineers, designers, drafters, fabrication shop personnel, and hardware vendors.
• Ability to perform technical surveys and organize/resolve technical issues.
• Ability and willingness to travel as necessary. Travel may include shipboard installation work.
• Willingness to work non-standard work schedules, such as off-hour backups and system upgrades.
• Good verbal and written communications skills.
• Fitness for special background investigation (SBI).
• Ability to obtain and maintain security clearance.
  

This position is Hybrid - Remote and will require commuting to a designated office. Hybrid work schedules are determined by the hiring manager based on business need.

All qualified candidates will receive consideration for all positions without regard to race, color, age, religion, sex (including pregnancy), sexual orientation, gender identity,national origin, veteran status,disability, genetic information, or other non-merit factors.

Regular full-time employees who apply will be considered along with external candidates. Employees with less than six months with their current position are not eligible to apply for job postings. Please discuss your interest in the position with your current manager/supervisor prior to submitting your completed application. It is highly recommended to apply through the PeopleSoft or Oceanet portals.