Note: The job is a remote job and is open to candidates in USA. SMX Services & Consulting, Inc. is seeking a Vendor Project Manager to support a State of Florida cybersecurity technical-assistance engagement. The role provides project leadership, coordination, documentation oversight, schedule management, stakeholder communication, and quality control for NIST Cybersecurity Framework-aligned assessments and testing.
Responsibilities
- Lead project startup, planning, coordination, execution, and closeout activities
- Coordinate activities with the Office of the Chief Inspector General (OCIG), participating OIGs, state agencies, and the SMX technical team
- Maintain the Master Project Plan and monitor project milestones, dependencies, schedules, risks, and deliverables
- Coordinate access requirements necessary for authorized cybersecurity testing
- Oversee preparation and delivery of required project documentation
- Ensure cybersecurity testing activities remain within customer-authorized scope
- Coordinate the development and review of testing strategies and detailed testing procedures
- Monitor completion of testing, supporting evidence, analysis, findings, and recommendations
- Support quality-assurance activities across project deliverables
- Coordinate knowledge-transfer activities with OCIG and participating OIG personnel
- Oversee required status reporting and project communications
- Support preparation of lessons learned and project-closeout documentation
- Review and certify the Agency Risk Understanding Memorandum as required by the project
- Ensure project personnel comply with applicable confidentiality, information-security, and customer requirements
Skills
- **Must be a U.S. Citizen.**
- Demonstrated project-management experience involving cybersecurity, information technology, security assessments, audits, or related technical services
- Ability to manage multiple concurrent workstreams and stakeholders
- Strong understanding of project planning, scheduling, risk management, issue management, and deliverable control
- Ability to coordinate technical cybersecurity personnel and communicate technical matters to management and audit stakeholders
- Strong written and verbal communication skills
- Experience preparing professional project plans, reports, meeting documentation, risk documentation, and executive-level communications
- Ability to manage sensitive cybersecurity information appropriately
- Ability to work effectively with government stakeholders and independent audit organizations
- The selected individual must nevertheless be capable of appropriately safeguarding sensitive cybersecurity information, including testing results, risk information, system information, findings, remediation information, and other restricted customer information
- NIST Cybersecurity Framework
- Cybersecurity assessments
- Vulnerability assessment and penetration testing projects
- Information-security audits
- Cybersecurity compliance
- Risk assessment and remediation
- Government cybersecurity programs
- Inspector General or internal-audit environments
- Enterprise cybersecurity testing programs
- Relevant project-management or cybersecurity certifications are desirable
Benefits
- Remote work arrangement
Company Overview