Senior Program Manager CSOC

United States·Rockvillesenior

OperationsProject Manager

0 views0 saves0 applied

Apply Now

Quick Summary

Key Responsibilities

Implementation: Develop and execute the strategic vision for the SOC, including establishing and achieving performance metrics and goals. Manage the SOC program in accordance with Contract

Requirements Summary

Establishing, developing, and implementing a comprehensive cybersecurity strategy aligned with the agency’s objectives and risk tolerance. Risk Management: Identifying, assessing,

Technical Tools

OperationsProject Manager

Responsibilities

~2 min read

→Implementation: Develop and execute the strategic vision for the SOC, including establishing and achieving performance metrics and goals. Manage the SOC program in accordance with Contract requirements, the management plan, and work schedule.

→Coordinate all SOC program task order and all operational activities.

→Establish, document, and manage the scope, schedule, and resource allocation for projects and SOC activities.
→Cybersecurity Strategy: Establishing, developing, and implementing a comprehensive cybersecurity strategy aligned with the agency’s objectives and risk tolerance.
→Risk Management: Identifying, assessing, and prioritizing potential security risks and vulnerabilities, and developing risk mitigation plans that align with Department and Federal cybersecurity initiatives.

→Security Policies and Procedures: Establishing a Security Operations Center (SOC), security policies, standards, guidelines, and procedures to ensure consistent and effective security practices across the agency against potential information technology threats and vulnerabilities; and ensuring compliance with Federal mandates and legislation, including the Federal Information Security Management Act, the President's Management Agenda, Executive Order: "Improving the Nation's Cybersecurity" and Cybersecurity and Infrastructure Security Agency (CISA) Emergency Directives.

→Incident Response and Management: Developing and leading incident response plans to address and resolve security breaches or cyber incidents effectively.
→Security Awareness and Training: Promoting cybersecurity awareness and conducting training programs to educate employees about security best practices and potential threats.
→Security Compliance: Ensuring that the organization complies with relevant industry regulations, data protection laws, and other security-related requirements.
→Security Architecture and Technology: Overseeing the selection, implementation, and management of security technologies, such as firewalls, antivirus systems, encryption tools, and intrusion detection systems.
→Reporting and Communication: Regularly communicating security-related matters to the executive team, client customer, and other stakeholders.
→Continuous Monitoring and Improvement: Continuously monitoring the security environment, staying current with emerging threats and industry trends, and making necessary adjustments to enhance the organization's security posture.

Requirements

~1 min read

Bachelor’s degree in IT, Cybersecurity, Business, or related field
US Citizenship is required.
Experience overseeing the Cyber Security Operations Center (CSOC) security function, ensuring the organization has the right controls, tools, technology, and visibility to respond effectively to cybersecurity threats.
Current CISSP certification is required.
Current PMP certification is preferred.
Strong knowledge of information security frameworks, such as NIST, ISO, and CIS
Understanding of networking concepts and protocols, including TCP/IP, VPN, DNS, and firewalls
Ability to collaborate with cross-functional teams, including software development, infrastructure, compliance, legal, and business stakeholders.
Current experience working at HHS or an HHS affiliated agency is preferred (FDA, NIH, CDC, ACF, CMS, HIS, ACL, AHRQ, ARPA-H, ASPR, ATSDR, HRSA, or SAMHSA).

What We Offer

~1 min read

This is an opportunity to make a direct impact on healthcare data processes that support critical regulatory functions. You will collaborate with dedicated professionals, work on meaningful projects, and contribute to improvements in public health systems.

#LI-OnSite

Candidates may use tools (including AI) for proofreading or formatting; however, using any tool to fabricate, exaggerate, or misrepresent qualifications, experience, or work product is not permitted. We may assess application materials for job-related technical depth, internal consistency, and demonstrated hands-on experience, including through follow-up questions, skills assessments, or reference checks. Verification of education may be requested before or during the hiring process.

For security and identity verification purposes, participants may be asked to temporarily disable virtual backgrounds during portions of the call.

Misrepresentation or falsification may result in removal from further consideration. Candidates who need a reasonable accommodation in the application or interview process may request one.