Cybersecurity Assessor

About

AlphaGov (Casa Moon LLC d/b/a AlphaGov) delivers public-sector consulting for cities, counties, school systems, special districts, utilities, and related agencies. Our work spans classification and compensation, organizational and operational studies, research and program evaluation, economic and workforce analysis, surveys and community research, and applied data and infrastructure research.

We engage experienced practitioners as project-based collaborators. Engagements are remote-first with occasional client travel. When you authorize it, AlphaGov may name you as an expert collaborator or key personnel on proposals that match your expertise. We build ready teams for live pursuits.

This opportunity is contingent upon contract award and final staffing approval. Permission will be requested before including a candidate's name or resume in a proposal.

AlphaGov is seeking a Cybersecurity Assessor to lead security assessments, risk and vulnerability assessments, and incident-response support for state and local government agencies. The work helps public organizations understand exposure, prioritize remediation, strengthen controls, and respond effectively to security events.

What you'll do

• Lead cybersecurity assessments covering governance, controls, systems, applications, and operational practices
• Conduct risk assessments, vulnerability assessments, findings analysis, and remediation prioritization
• Develop client-ready assessment reports, risk registers, executive briefings, and improvement roadmaps
• Support incident-response planning, tabletop exercises, investigations, and post-incident improvement activities
• Map findings and recommendations to practical public-sector security frameworks and agency priorities
• Coordinate interviews and evidence reviews with agency technology, security, privacy, and business stakeholders

Requirements

Required

• Hands-on cybersecurity assessment and security-risk evaluation experience
• Experience conducting vulnerability assessments and translating findings into prioritized remediation plans
• Incident-response support experience, including planning, exercises, investigation support, or post-incident reviews
• State, local, education, utility, or other public-sector cybersecurity experience
• Comfortable as a 1099 / project-based collaborator

Nice to have

• CISSP, CISM, CRISC, GIAC, Security+, or comparable credential
• Experience with NIST CSF, NIST SP 800-53, NIST SP 800-61, CIS Controls, CJIS, or comparable frameworks
• Experience assessing cloud, identity, endpoint, network, or third-party security controls
• Public-agency continuity, cyber-resilience, or tabletop-exercise experience