Program Protection Lead

About the position The Program Protection Lead within SP2 will apply a multidisciplinary approach to analyze criticality for MITRE operations and programs. This role involves assessing threats and vulnerabilities, characterizing risk for business leaders, and developing cost-effective countermeasures to reduce risk at corporate, program, and project levels. The Program Protection Lead will collaborate with diverse stakeholders across the company and the broader RMA team, including risk intelligence, insider threat, corporate security, and business leaders, to assess and mitigate threats to MITRE projects, staff, and information as an integrated element of MITRE’s ERM program. The Program Protection Lead should possess advanced risk management skills and experience but also have strong technical knowledge of computer & systems engineering to best integrate with MITRE work programs and staff.

Responsibilities

• Serve as a trusted advisor to the ERM management team and business leaders, ensuring alignment with organizational strategy and risk tolerance.
• Coordinate with multidisciplinary stakeholders to assess and mitigate threats to MITRE projects, staff, systems, and information.
• Lead efforts to analyze MITRE operations and programs for criticality, assessing threats and vulnerabilities.
• Develop and implement cost-effective countermeasures to reduce risk at corporate, program, and project levels.
• Prepare and deliver tailored travel awareness briefings to promote a culture of proactive threat detection and prevention.
• Develop and execute comprehensive CI, operations security (OPSEC), and program protection plans for staff, sites/locations, and work programs.
• Ensure plans are agile, responsive, and cost-effective for both Sponsor and MITRE-funded initiatives.
• Integrate program protection activities into MITRE’s broader ERM program.
• Design and deploy actionable risk management solutions to address complex and nuanced threats identified through investigations and threat detection initiatives.
• Apply and manage risk mitigations while leveraging deep technical knowledge in areas such as cyber security, counterintelligence operations, risk management, program protection planning, or industrial security.
• Apply knowledge of the NISPOM to effectively integrate risk management activities into MITRE’s classified work program.

Requirements

• Typically requires a minimum of 8 years of related experience with a Bachelor’s degree; or 6 years with a Master’s degree; or equivalent combination of related education and work experience.
• Multidisciplinary background with deep technical knowledge and experience in at least two of the five following areas: risk management, program protection planning, cyber security/systems engineering, industrial security, or intelligence analysis/counterintelligence:
• Risk Management: Applying risk management principles at project, program, or enterprise levels.
• Program Protection Planning: Assessing and mitigating security risks across project lifecycles.
• Cyber Security/Systems Engineering: Demonstrate expertise in cybersecurity and security-focused systems engineering, including threat modeling, risk assessment, incident response, secure system design, integration of security controls, vulnerability management, adherence to cybersecurity frameworks and standards (e.g., NIST, ISO 27001), and lifecycle management for complex systems.
• Industrial Security: Applying knowledge of the National Industrial Security Program Operating Manual (NISPOM) and managing Controlled Unclassified Information (CUI).
• Intelligence/Counterintelligence: Conducting data and intelligence research, develop analytical reports, and deliver briefings and/or utilizing investigative or analytical tradecraft to counter Foreign Intelligence Entities.
• Ability to communicate complex issues clearly in a concise and organized manner both verbally and in writing.
• Demonstrated experience leveraging technical tools and software to optimize information system security and effectiveness.
• Intellectually curious with excellent problem-solving skills and an ability to dissect issues quickly to characterize emerging concerns, especially in a cross-functional and matrixed environment.
• Excellent strategic relationship-building skills.
• Working knowledge of the NISPOM.
• Active Top-Secret Clearance with the eligibility for TS/SCI clearance.
• This position requires a minimum of 50% hybrid on-site.

Nice-to-haves

• Advanced degree in Security Management, Business Administration, or a related field.
• Certification in Cyber Security, Pen-Testing, or similar (CompTIA Security+, Certified Ethical Hacker, ISC2 CISSP, etc...).
• Experience working within an FFRDC, UARC, or similar R&D environment.
• Multi-disciplinary background with deep technical knowledge and experience in at least three of the following: intelligence/counterintelligence operations, risk management, program protection planning, supply chain risk mitigation, OPSEC program management, systems engineering, or industrial security.
• Demonstrated knowledge of research security programs as required under National Security Presidential Memorandum 33 (NSPM-33), including understanding policies and practices to protect research integrity and mitigate risks associated with foreign influence and interference.
• Active Top Secret clearance.

Apply tot his job Apply To this Job