Sr. IT Project Manager – Cybersecurity Compliance

Sr. IT Project Manager – Cybersecurity Compliance

About APTNEXUS

Since our founding in 2012, APTNEXUS has empowered federal agencies and commercial enterprises to navigate the complexities of the digital landscape. As a quality-driven small business, we specialize in the seamless delivery of IT modernization and elite cybersecurity solutions. We help our clients modernize and fortify their technology stacks, ensuring their most critical data and assets remain resilient, optimized, and secure in an evolving threat environment.

Clearance:

• Must be eligible for a Public Trust clearance. An active Treasury Minimum Background Investigation (MBI) is required or must be obtainable. Active MBI is strongly preferred.

Position Overview:

APTNEXUS is seeking a Senior IT Project Manager – Cybersecurity Compliance to support our contract with the U.S. Department of the Treasury. In this critical role, you will serve as the primary project manager responsible for directing and coordinating all aspects of cybersecurity compliance activities for the Treasury customer. You will lead a highly skilled team of cybersecurity professionals responsible for ensuring the customer’s information systems maintain compliance with federal mandates, including FISMA, NIST Risk Management Framework (RMF), and Treasury-specific cybersecurity policies.

The ideal candidate brings deep expertise in cybersecurity governance, risk, and compliance (GRC) within a federal environment and possesses both the PMP and CISSP certifications. Your job responsibilities will include:

• Direct and manage all cybersecurity compliance deliverables and milestones in accordance with the Treasury Cybersecurity Compliance Contract, ensuring adherence to scope, schedule, and budget.
• Serve as the primary point of contact (POC) for the Contracting Officer’s Representative (COR) and Treasury customer leadership on all project management and cybersecurity compliance matters.
• Lead the execution of the NIST Risk Management Framework (RMF) across Treasury information systems, including categorization, security control selection, implementation, assessment, authorization, and continuous monitoring.
• Oversee the preparation, review, and submission of Assessment and Authorization (A&A) packages, System Security Plans (SSPs), Security Assessment Reports (SARs), and Plans of Actions and Milestones (POA&Ms).
• Manage FISMA annual reporting requirements, including coordination of performance metrics, system inventory updates, and compilation of the annual FISMA report to Treasury.
• Direct cybersecurity compliance activities related to OMB Circular A-123 internal controls assessments and coordinate with internal and external auditors during IT General Controls (ITGC) audit engagements.
• Establish and maintain program management infrastructure including project plans, resource allocation, integrated master schedules (IMS), risk registers, and status reports.
• Provide oversight and coordination of Continuous Monitoring activities, including vulnerability scanning, configuration management, and security control testing.
• Lead transition-in and transition-out phases throughout the contract lifecycle, ensuring continuity of cybersecurity operations and seamless handoffs.
• Identify, assess, and communicate program risks and issues to stakeholders; develop and implement mitigation strategies to protect contract performance.
• Exercise broadly delegated authority for planning, directing, coordinating, and executing multiple contract requirements and expectations including management of both APTNEXUS staff and subcontractors.
• Deliver high-quality, on-time contractual deliverables including status reports, briefings, and technical documentation for executive and senior government leadership.
• Provide thought leadership on cybersecurity compliance best practices, federal regulatory changes, and emerging risk areas affecting the customer’s cybersecurity posture.
• Facilitate regular program reviews, stakeholder meetings, and executive briefings, communicating complex cybersecurity topics clearly to both technical and non-technical audiences.

Education:

• Bachelor’s degree in Computer Science, Information…