Owns the security posture and compliance of corporate and CUI systems. Maintains security documentation, implements NIST, RMF, and CMMC controls, monitors Microsoft 365, AWS, Windows, Linux, and Active Directory environments, and leads audits, DCSA reviews, and CMMC assessments. Coordinates cybersecurity training, access management, patching, hardening, secure development scanning, cloud security assessments, and remediation activities while collaborating with leadership, the FSO, DCSA, and service providers.