Crest Security Assurance

Compensation

Full Description

We are seeking a highly skilled and motivated Cybersecurity Program Manager to join our team and bring new security processes to fruition within our organization. As a Cybersecurity Program Manager, you will be responsible for planning, initiating, and managing information technology (IT) security projects. You will lead and guide the work of technical staff and serve as liaison between the business and technical aspects of projects. You will plan project stages and assess business implications for each stage, in addition to monitoring progress to ensure deadlines, standards, and cost targets are met. Responsibilities: • Provide management, direction, administration, quality assurance, and leadership for program execution, including direct management and oversight of all subcontractors, service providers, and supporting services. • Serve as the primary point of contact and trusted advisor to Federal Leadership, providing programmatic and cybersecurity advisory services to support informed decision-making, risk management, and mission objectives. • Provide weekly progress reports to the Technical Point of Contact (TPOC) and other Government personnel on the status and progress of security assessment and authorization activities, including Trusted Agent Tool input, Risk Assessments, Test Plans, identified risks, and issues. • Develop and submit Monthly Status Reports (MSRs), using Microsoft Office Suite applications, to the TPOC and Contracting Officer’s Representative (COR). • Provide oversight of projects and initiatives to ensure execution is on schedule, within budget, aligned with requirements, and conducted in accordance with division, branch, and agency policies, guidance, and processes. • Provide cybersecurity advisory and consulting services to Federal stakeholders on information security risks, security assessment and authorization activities, cyber defense priorities, vulnerability management, compliance requirements, and risk-based remediation strategies. • Develop, monitor, analyze, and refine reports, dashboards, and key performance indicators (KPIs) to measure program performance, cybersecurity risk, operational effectiveness, and progress toward established objectives. • Maintain comprehensive knowledge of information security and cyber defense policies, laws, regulations, standards, concepts, technologies, and industry best practices, and provide guidance on their application to agency missions and systems. • Develop and maintain the Microsoft Project Integrated Master Schedule (IMS) to track key activities, milestones, dependencies, deliverables, and program risks. • Develop, maintain, and update program and project plans, including Transition, Project Management, and Quality Control Plans, to support effective execution, governance, and continuous improvement. Required and Desired Skills: • Experience managing Federal IT Security projects, a team of 10 or more FTE • Bachelor's degree in computer science, information technology, or related field • Active/Current PMP; CISSP (desired) • Experience with FedRAMP compliance and certification • Knowledge and experience using CSAM or similar Vulnerability Management Systems • Experience with risk management, identifying risk, assessing risk, and taking steps to reduce risk to an acceptable level and assessing and mitigating risks identified within business systems and IT applications, platforms and infrastructure • Experience with Cyber Assurance Support, ensuring response and notifications to credible threats, active and new vulnerability remediation, proper response from contractors managing applications and environments, SOC services validation to include SOC operations, tool deployment and utilization. Job Type: • Full-time Benefits: • 401(k) • Dental insurance • Health insurance • Paid time off • Vision insurance Schedule: • 8-hour shift • Monday to Friday Education: • Bachelor's (Required) Experience: • FedRAMP: 3 years (Required) • CSAM: 3 years (Required) License/Certification: • PMP (Preferred)