Note: The job is a remote job and is open to candidates in USA. Crest Security Assurance is seeking a Cybersecurity Program Manager to bring new security processes to fruition within its organization. The role plans, initiates, and manages federal IT security projects, leads technical staff, advises federal stakeholders, and oversees program execution, reporting, risk management, compliance, and security assessment activities.
Responsibilities
- Provide management, direction, administration, quality assurance, and leadership for program execution, including direct management and oversight of all subcontractors, service providers, and supporting services
- Serve as the primary point of contact and trusted advisor to Federal Leadership, providing programmatic and cybersecurity advisory services to support informed decision-making, risk management, and mission objectives
- Provide weekly progress reports to the Technical Point of Contact (TPOC) and other Government personnel on the status and progress of security assessment and authorization activities, including Trusted Agent Tool input, Risk Assessments, Test Plans, identified risks, and issues
- Develop and submit Monthly Status Reports (MSRs), using Microsoft Office Suite applications, to the TPOC and Contracting Officer’s Representative (COR)
- Provide oversight of projects and initiatives to ensure execution is on schedule, within budget, aligned with requirements, and conducted in accordance with division, branch, and agency policies, guidance, and processes
- Provide cybersecurity advisory and consulting services to Federal stakeholders on information security risks, security assessment and authorization activities, cyber defense priorities, vulnerability management, compliance requirements, and risk-based remediation strategies
- Develop, monitor, analyze, and refine reports, dashboards, and key performance indicators (KPIs) to measure program performance, cybersecurity risk, operational effectiveness, and progress toward established objectives
- Maintain comprehensive knowledge of information security and cyber defense policies, laws, regulations, standards, concepts, technologies, and industry best practices, and provide guidance on their application to agency missions and systems
- Develop and maintain the Microsoft Project Integrated Master Schedule (IMS) to track key activities, milestones, dependencies, deliverables, and program risks
- Develop, maintain, and update program and project plans, including Transition, Project Management, and Quality Control Plans, to support effective execution, governance, and continuous improvement
Skills
- Experience managing Federal IT Security projects, a team of 10 or more FTE
- Bachelor's degree in computer science, information technology, or related field
- Experience with FedRAMP compliance and certification
- Knowledge and experience using CSAM or similar Vulnerability Management Systems
- Experience with risk management, identifying risk, assessing risk, and taking steps to reduce risk to an acceptable level and assessing and mitigating risks identified within business systems and IT applications, platforms and infrastructure
- Experience with Cyber Assurance Support, ensuring response and notifications to credible threats, active and new vulnerability remediation, proper response from contractors managing applications and environments, SOC services validation to include SOC operations, tool deployment and utilization
- Bachelor's (Required)
- FedRAMP: 3 years (Required)
- CSAM: 3 years (Required)
- Active/Current PMP; CISSP (desired)
- PMP (Preferred)
Benefits
- 401(k)
- Dental insurance
- Health insurance
- Paid time off
- Vision insurance
Company Overview