Cybersecurity Plan Reviewer

OneZero Solutions is an employee-centric company that builds technically proficient teams supporting cyber missions. The Cybersecurity Plan Reviewer conducts cursory and detailed technical reviews of cybersecurity plans, assessments, waivers, and equivalency requests for maritime organizations, applying Government-furnished guidance and recommending findings. The role also prepares review correspondence, maintains case records, responds to status inquiries, and completes assigned maritime and OT cybersecurity training.

What you'll do:

• Conduct Stage One cursory review of assigned submittals to determine whether the submission is complete and includes all required documents, information, and elements
• Identify incomplete submittals and prepare draft signature-ready correspondence clearly identifying each deficiency, omission, or discrepancy, the associated regulatory basis, and brief instructions for resubmission
• Conduct Stage Two detailed technical review to evaluate whether submissions satisfy the applicable requirements of 33 CFR Subpart F and associated Government guidance
• Recommend a finding of Satisfactory, Unsatisfactory, or Not Applicable for each regulatory checklist element, using Government-furnished checklists, process guides, and decision matrices
• Ensure findings are clearly stated, technically supportable, internally consistent, and traceable to the applicable regulatory requirement, checklist element, or Government guidance
• Prepare review packages and draft signature-ready correspondence for Government review and signature
• Record and maintain review status in MISLE, USCG SharePoint, and USCG ServiceNow before the close of the following business day
• Respond to status inquiries using only information available in Government databases or published Government regulations and guidance, and refer all policy-related inquiries to the designated USCG representative
• Complete company-provided maritime operations and OT cybersecurity training as assigned
• Report to the Sub-Project Manager any submitter that may present an organizational conflict of interest

What they're looking for:

• A working knowledge of 33 CFR Subchapter H, specifically 33 CFR Part 101 Subpart F
• A foundational understanding of maritime operations. This may be met through prior experience or through company-provided training
• A foundational understanding of general cybersecurity principles and frameworks
• Strong technical writing skills and demonstrated attention to detail in document review
• Ability to meet recurring turnaround requirements in a high-volume review environment
• Must disclose, for organizational conflict of interest screening, any current or prior engagement performed for MTSA-regulated vessel, facility, or Outer Continental Shelf facility owners or operators involving cybersecurity plan development, cybersecurity assessment, or related advisory services
• **One of the following certifications required: Security +, CASP, PenTest +, GSEC, SecurityX**
• No security clearance is required. This work is performed at the Controlled Unclassified Information (CUI) level
• S. citizenship is required. All personnel must undergo and successfully pass, at minimum, a Tier 1 background investigation (or equivalent) and be favorably adjudicated
• Checklist-based technical review and evidence evaluation
• NIST Cybersecurity Framework fundamentals
• Technical writing for a regulatory audience

Benefits:

• For OneZero full-time employees: health insurance
• For OneZero full-time employees: dental insurance
• For OneZero full-time employees: vision insurance
• For OneZero full-time employees: life insurance
• For OneZero full-time employees: 401(k) with company matching
• For OneZero full-time employees: paid time off and holidays
• For OneZero full-time employees: employee referral program
• For OneZero full-time employees: educational assistance
• Remote work within the United States
• Company-provided maritime operations and OT cybersecurity training