Program Manager​/Cybersecurity Subject Matter Expert; SME

responsibilities & qualifications

responsibilities

• provide overall leadership, management, and strategic direction for cybersecurity and information technology programs, ensuring successful execution of contractual requirements, mission objectives, and customer expectations.
• manage program cost, schedule, staffing, technical performance, risk, and quality across multiple concurrent projects and task areas.
• serve as the primary point of contact for government stakeholders, including contracting officers (co), contracting officer representatives (cor), authorizing officials (ao), and senior leadership.
• lead program planning, resource allocation, staffing, performance management, and execution activities to ensure timely delivery of all contract requirements and program deliverables.
• coordinate cross-functional teams consisting of cybersecurity engineers, system administrators, network engineers, developers, vendors, and government personnel to achieve program objectives.
• oversee program reporting, performance metrics, executive briefings, risk registers, corrective actions, and continuous process improvement initiatives.
• provide direct leadership and oversight of cybersecurity engineers, cybersecurity analysts, and project managers, ensuring effective execution of program objectives, personnel development, and delivery of contract requirements.
• prepare and deliver corporate and program-level reports, executive briefings, performance metrics, staffing updates, risk assessments, and customer status reports while identifying, tracking, and communicating program risks, issues, dependencies, and mitigation strategies to stakeholders, senior leadership, and government customers.
• ensure compliance with contractual requirements, organizational policies, and applicable federal and dow regulations.
• provide senior-level cybersecurity subject matter expertise supporting risk management framework (rmf), cybersecurity compliance, and security authorization activities.
• lead the development, review, assessment, and maintenance of cybersecurity authorization packages supporting iatts, iatos, atos, atcs, and continuous monitoring requirements.
• direct cybersecurity engineering, security architecture, vulnerability management, incident response, and risk management activities to maintain and improve the organization’s security posture.
• review and assess cybersecurity artifacts including ssps, security assessment reports, risk assessments, poa&ms, security control traceability matrices, contingency plans, incident response plans, and configuration management plans.
• ensure compliance with dow cybersecurity policies, nist standards, jsig requirements, fisma, zero trust principles, and applicable security regulations.
• lead vulnerability assessment and remediation efforts utilizing enterprise security monitoring solutions.
• provide expertise in systems security engineering, supply chain risk management (scrm), cyber resiliency, information protection, and secure infrastructure modernization initiatives.
• support cybersecurity governance activities, security reviews, audits, assessments, and authorization decision processes.
• develop cybersecurity strategies, policies, procedures, and training initiatives to enhance organizational awareness, compliance, and operational resilience.

required qualifications

• bachelor’s degree in cybersecurity, information technology, computer science, engineering, business management, or a related field.
• twelve (12)+ years of experience managing large scale cybersecurity programs with multiple concurrent packages, schedules, budgets, deliverables, and stakeholder requirements within dow, federal government, or similarly regulated environments.
• extensive expertise in the risk management framework (rmf), including security authorization processes, ato lifecycle management, continuous monitoring, and compliance validation, with demonstrated proficiency using emass and department of war (dow) workflow tools to manage authorization packages, cybersecurity artifacts, and compliance activities.
• extensive knowledge of dow cybersecurity policies, directives, frameworks, and standards, including rmf, nist 800-53, nist…