Program Manager
$150,000–$200,000 year
On-siteSan Antonio, Texas, United States
Job Summary
Execute Cybersecurity Assurance Readiness (CSAR) and Risk Management Framework (RMF) processes, coordinating Electronic Requirements Oversight Committee (eRoc), IT Data Oversight and Governance (IDOG), and Portfolio Management workflows. Lead preparation of Information Technology Scoping Worksheets, Privacy Impact Assessments, Concept of Operations documents, and Capability Requirement Solution Planning Workbooks. Develop, review, and maintain System Security Plans, Security Assessment Reports, Plans of Action and Milestones, and Authorization packages in accordance with DoD and NIST standards. Perform data entry and reporting using eMASS, monitor security control effectiveness, facilitate issue resolution, and support preparation of Authorization to Operate packages. Facilitate executive meetings and engage with System Requirement Owners and Authorizing Officials to ensure timely delivery of project objectives and maintain quality standards.
Required Qualifications
- Active DOD Secret (S) Clearance
- Bachelor's Degree
- 8 years of related experience
- Demonstrated experience supporting DoD cybersecurity governance processes including the Electronic Requirements Oversight Committee (eRoc), IT Data Oversight and Governance (IDOG), and Portfolio Management processes with associated documentation requirements
- Hands-on experience developing and coordinating Capability Requirement Solution Planning Workbook (CRSP) documentation, Information Technology Scoping Worksheets (ITCSC), Privacy Impact Assessments (PIA), Privacy Confidentiality Impact Level (PCIL) determinations, Hardware/Software Lists, and Concept of Operations (CONOPS) documents
- Working knowledge of Clinger Cohen Act (CCA) compliance, Business Enterprise Architecture (BEA) processes, Information Technology Portfolio Management System (ITIPS) registration, and Enterprise Mission Assurance Support Service (eMASS) registration and management
- Demonstrated experience supporting DoD RMF processes per DoDI 8510.01, including all seven RMF lifecycle phases (Prepare, Categorize, Select, Implement, Assess, Authorize, and Monitor) and continuous monitoring activities
- Proficiency in developing and maintaining comprehensive cybersecurity documentation including System Security Plans (SSP), Security Assessment Plans (SAP), Security Assessment Reports (SAR), Plans of Action and Milestones (POA&M), and Authorization to Operate (ATO) packages
- Advanced experience using the Enterprise Mission Assurance Support Service (eMASS) platform for security control documentation, workflow management, compliance reporting, and coordination with Information System Security Managers (ISSMs), Program Managers, and System Owners
- Working knowledge of NIST SP 800-37, NIST SP 800-53 (Rev 4 & 5), NIST SP 800-60, FIPS 199/200, and related federal cybersecurity policies, standards, and guidelines
- Excellent communication and organizational skills with demonstrated ability to coordinate with System Requirement Owners, Authorizing Officials, and cross-functional teams
- Proven ability to manage multiple cybersecurity assessment, authorization, and governance activities simultaneously while ensuring timely delivery of project objectives and maintaining quality standards
Desired Qualifications
- PMP certification from an accredited institution
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.