Security Lead/ISSO

Lentech is seeking a high-Performance, multi-disciplinary team to lead a technical implementation of a Microsoft Dynamics 365 and Power Platform-based case management system (CMS).

This mission-critical project and CMS supports legal services to children in support of the U.S.

Government.

U.S.

Citizenship is required along with the ability to positively pass a public trust background investigation.

The primary implementation timeline occurs across the first 180 days of the project and moves into steady state operations for the remainder of the first year.

A five-year follow-on contract is expected based on positive performance in the first year.

The implementation follows an aggressive timeline divided into four key phases: Mobilization, Core Operations, Fully Functional Delivery, and Steady-state Operations.

This effort demands a collaborative team capable of maintaining operational continuity throughout the transition and into operations.

You will be working with a primary legal team providing the CMS to the lawyers working each individual case.

Candidates must be prepared to handle high-velocity delivery, strict data privilege boundaries, and the technical rigor required to support vulnerable populations.

• Security Artifact Production: Lead the development of a comprehensive artifact package, including the System Security Plan (SSP) , FIPS 199 categorization, e-Authentication Risk Assessment, Business Impact Analysis (BIA), and the system contingency plan.
• Incident Management: Establish and manage the mandatory incident notification path and support the formal government reporting process.
• Access and Privilege Control: Implement "default-deny" access boundaries for attorney work product, manage organization isolation for external providers, and conduct monthly account and access reviews with retained evidence.
• Data Privacy Integration: Integrate privacy-by-design requirements into the data model, including data minimization, PII review protocols, and ensuring no Social Security Numbers are stored by design.
• Assessment and Findings Support: Maintain the Plan of Action and Milestones (POA&M) for open findings and provide the objective evidence required to support independent assessments and Government connection readiness.
• Governance: Participate in the Change Control Board (CCB) to review and approve all security-relevant and baseline changes.
• Technical Resilience: Implement and test backup, recovery, and reconstitution procedures based on Organization-approved RTO (Recovery Time Objective) and RPO (Recovery Point Objective) values.