Provide program and project management of highly complex IT initiatives
Execute the hands-on manual technical NIST SP 800-53 security control assessments including any overlays (e.g. high value asset, artificial intelligence, critical software, FedRAMP, etc.)
Assess the impacts of new laws, regulations, policies, and guidance on client Security Assessment requirement initiatives and advise on recommended process changes. Additionally review current client policies, guidance, manuals, and supporting tools to recommend updates and improvements, and assist with the implementation of any new guidelines
Recommend process improvements and automated approaches to support testing methodologies, establishing streamlined/agile approaches for Security Controls Assessments
Maintain key assessment package templates to ensure compliance with current/emerging federal guidance and lessons learned
Execute security controls assessments and provide training to ensure Government staff understand and can perform security control assessments
Provide subject matter expertise to incorporate threat modeling &hunting into the security control assessment process, improving the Government’s ability to proactively identify and mitigate risks
Identify, develop, and implement automation solutions that enhance the efficiency, accuracy, and timeliness of program operations. Evaluate current business processes, workflows, and system interactions to determine opportunities where automation—such as robotic process automation (RPA), workflow orchestration, data transformation tools, or other intelligent automation technologies—can reduce manual workload, eliminate redundancies, and improve mission outcomes

Requirements

Must be a U.S. Citizen
Master’s degree in computer science, Information Systems, Engineering, or related technical field
Project Management Professional (PMP) or Program Management Professional (PgMP) certification (or equivalent) required
ITIL, Agile (Scrum Master/SAFe), or DAWIA Level III PM certifications are highly desirable
10 years or more of progressively responsible experience in information technology project management, systems analysis, and systems integration in large scale or mission-critical environments
At least 5 years in a lead or supervisory capacity, managing multidisciplinary teams and overseeing the full lifecycle of complex IT initiatives
Excellent presentation and verbal communication skills
Ability to create accurate written work products by following Job Aids and document templates
Ability to work under pressure and tight timelines for multiple projects with positive attitude and flexibility
Knowledge of FISMA, NIST Special Publications, OMB, Risk Management Framework (RMF), and ISCM Plan development.
IT security knowledge with desired Professional Certifications from the International Information System Security Certification Consortium (ISC)2, the International Society for Automation (ISA), the Project Management Institute (PMI), CompTIA, or the SANS Institute
Knowledge and experience with technology risk assessments covering Webservices, network appliances and software
Knowledge and experience of the IRS Enterprise Lifecycle and OneSDLC
Knowledge of System Interconnections to include virtual private network (VPN) and other encryption technologies
Knowledge and experience with cloud systems, CSPs, and FedRAMP requirements
Project management experience, experience in monitoring and overseeing multiple tasks concurrently
Knowledge/experience with Qmulos Q-Compliance, SharePoint, scanning tools, ServiceNow GRC, SPLUNK is preferred
Ability to pass a federal government background investigation; the investigation will involve a credit, fingerprint, and law enforcement agency check

Benefits

Medical, Dental, and Vision insurance
Retirement savings 401K plan provided by an industry leading provider with 3% employer contributions of the employee’s gross salary
Paid Time Off and Standard Government Holidays
Life Insurance, Short- and Long-Term disability benefits
Training Benefits

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

NIST SP 800-53security control assessmentsautomation solutionsrobotic process automation (RPA)workflow orchestrationdata transformation toolstechnology risk assessmentscloud systemsencryption technologiesIRS Enterprise Lifecycle

Soft Skills

presentation skillsverbal communicationwritten communicationability to work under pressureflexibilityleadershipteam managementprocess improvementsubject matter expertisetraining

Certifications

Project Management Professional (PMP)Program Management Professional (PgMP)ITILAgile (Scrum Master/SAFe)FISMANIST Special PublicationsRisk Management Framework (RMF)ISCM PlanCompTIASANS Institute