The Senior Cybersecurity Compliance Oversight SME & Business Integrator provides independent technical review, 2nd-line challenge, and risk governance across a mission critical financial system boundary.

Reflecting ongoing HHS Security Modernization efforts, this role broadens beyond traditional vulnerability management to encompass the full spectrum of federal security domains—including Vulnerability & Patch Management (BOD 26-04), Configuration Baselines, Centralized Logging & Event Correlation (OMB M-26-14 / M-21-31), Continuous Monitoring & Threat Hunting, and Identity & Access Management (IAM / Zero Trust) .

Operating independently from day-to-day operations, the incumbent delivers a risk perspective to the System Owner and management team, critically challenges Security Operations (SecOps) outputs, and fulfills a dual-track Dashboard Business Integration role: (1) providing governance oversight on SecOps internal vulnerability dashboard, and (2) leading the functional design and rollout of independent 2nd-line risk and compliance oversight dashboards.