MANTECH seeks a motivated, career and customer-oriented Executive Director. Insider Threat and Security Investigations to join our team in Herndon, VA. This is a remote position.

The Executive Director for Insider Threat and Security Investigations is responsible for MANTECH’s Insider Threat Program, counterintelligence program and conducting special issue investigations as directed by the Chief Security Officer.

Responsibilities include, but are not limited to:

• Managing and Leading the Insider Threat and Investigations program and counterintelligence program that includes two investigators, two analysts, and a part-time engineer and part-time investigator under the auspices of the Chief Security Officer. Elevate concerns and provide advice and guidance to senior leadership about sensitive insider threat issues.

• Review all written reports, referrals to outside USG agencies and maintain those relationships. Execute and update standard operating procedures (SOPs) for the Insider Threat Program.

• Responsible for directing investigations and analysis based on monitoring, auditing, and analyzing information systems for suspicious network events, policy violations and insider threats such as foreign influence, financial stressors, threats to self or others, and assist with taking appropriate mitigating actions.

• Lead triage of anomalous events collected by data analytics tools and other sources to decipher underlying trends or discern obscure patterns and attributes. Oversee the administration and effectiveness of User Activity Monitoring. Proactively identify and pursue insider threat capabilities.

• Provide analytic case support to ITP stakeholders such as Compliance, ERC, IT and to support administrative or security inquiries. Ensure ITP and Insider Threat Working Group members take all DCSA mandatory insider threat training and education, and ensure ITP provides insider threat awareness briefings for Security employees as well as MANTECH employees periodically.

• Collaborate with outside Insider Threat Professionals and ManTech Functional teams to develop innovative Insider Threat capabilities to further enhance our proactive and reactive Insider Threat process. Keep team members aware of emerging threats and new indicators. Lead monthly Industry wide insider threat working group.

• Participate in MANTECH’s Insider Threat Working Group and lead briefings to the Insider Threat Oversight Committee. Provide statistical information and case updates to the CSO for presentation to the Board of Directors. Provide Quarterly briefings to the CEO. Provide monthly briefings to CPO and OGC on Insider Threat cases and trends. Provide Insider Threat briefings across Security and across MANTECH.

• Any other duties as outlined by the CSO.

Minimum Qualifications:

• Must have 10 years of experience in the insider threat field. Bachelor’s degree is preferred

• Must possess a minimum of 2 years of experience with National Industrial Security and Intelligence community Insider threat requirements and familiarity with data analytic tools used for Insider Threat information collection

• The candidate must possess experience with analytical problem solving and familiarity with conducting operations relating to insider threat, counterintelligence investigations, and counterespionage

• The following courses provided by the Center for Development of Security Excellence (CDSE) must be completed within 30 days of position start date: CI112.16 Counterintelligence Awareness and Security Brief / CI112.16 Counterintelligence Awareness and Reporting Course for DoD / INT101.6 Insider Threat Awareness Course

• Proof of prior completion of military/IC equivalent CI & InT training courses may be provided in lieu of completion

• Knowledge of other Insider Threat risk scoring data analytics tools/programs and familiarity with insider threat detection and risk mitigation principles preferred

• Superior writing and briefing skills required to present and publish finished analytical reports, synopses and other briefings as required

Security Clearance:

• Must have a current/active Top Secret clearance

Physical Requirements:

• Must be able to remain in a stationary position 50%

• Needs to occasionally move about inside the office to access file cabinets, office machinery, etc.

• Constantly operates a computer and other office productivity machinery.

• Frequently communicates with co-workers, management and customers, which may involve delivering presentations

• Must be able to exchange accurate information in these situation