Cybersecurity Program Manager

Crest Security Assurance; United States; On-site; USD 120,000 - 165,000; Full time

Benefits offered by this job

Job summary

Crest Security Assurance is seeking a Cybersecurity Program Manager to plan, initiate, and manage IT security projects. You will lead technical staff and liaise between business and technical teams to ensure timely, compliant delivery.

The role includes advising Federal stakeholders on information security risks, managing security assessments, and delivering monthly status reports to leadership. A strong background in FedRAMP and vulnerability management is essential.

Qualifications

• Experience managing Federal IT Security projects with large teams.
• Bachelor’s degree in a related field is required.
• Experience with FedRAMP compliance and certification.
• Knowledge of CSAM or similar vulnerability management systems.
• Experience with risk management and remediation strategies.
• Experience with Cyber Assurance Support and SOC services.

Responsibilities

• Provide management, direction, and leadership for program execution and oversee subcontractors.
• Serve as primary advisor to Federal Leadership on risk, security, and mission objectives.
• Submit weekly progress reports and MSRs to the TPOC and COR.
• Ensure projects stay on schedule, within budget, and compliant with policies.
• Provide cybersecurity advisory and consulting services to Federal stakeholders.
• Develop and refine dashboards and KPIs to measure program performance.

Skills

Federal IT Security

Cybersecurity advisory

Risk management

Project management

Vendor management

Education

Bachelor's degree in computer science, information technology, or related field

Tools

CSAM

Vulnerability Management Systems

Job description

We are seeking a highly skilled and motivated Cybersecurity Program Manager to join our team and bring new security processes to fruition within our organization. As a Cybersecurity Program Manager, you will be responsible for planning, initiating, and managing information technology (IT) security projects. You will lead and guide the work of technical staff and serve as liaison between the business and technical aspects of projects. You will plan project stages and assess business implications for each stage, in addition to monitoring progress to ensure deadlines, standards, and cost targets are met.

Responsibilities:

• Provide management, direction, administration, quality assurance, and leadership for program execution, including direct management and oversight of all subcontractors, service providers, and supporting services.
• Serve as the primary point of contact and trusted advisor to Federal Leadership, providing programmatic and cybersecurity advisory services to support informed decision-making, risk management, and mission objectives.
• Provide weekly progress reports to the Technical Point of Contact (TPOC) and other Government personnel on the status and progress of security assessment and authorization activities, including Trusted Agent Tool input, Risk Assessments, Test Plans, identified risks, and issues.
• Develop and submit Monthly Status Reports (MSRs), using Microsoft Office Suite applications, to the TPOC and Contracting Officer’s Representative (COR).
• Provide oversight of projects and initiatives to ensure execution is on schedule, within budget, aligned with requirements, and conducted in accordance with division, branch, and agency policies, guidance, and processes.
• Provide cybersecurity advisory and consulting services to Federal stakeholders on information security risks, security assessment and authorization activities, cyber defense priorities, vulnerability management, compliance requirements, and risk-based remediation strategies.
• Develop, monitor, analyze, and refine reports, dashboards, and key performance indicators (KPIs) to measure program performance, cybersecurity risk, operational effectiveness, and progress toward established objectives.
• Maintain comprehensive knowledge of information security and cyber defense policies, laws, regulations, standards, concepts, technologies, and industry best practices, and provide guidance on their application to agency missions and systems.
• Develop and maintain the Microsoft Project Integrated Master Schedule (IMS) to track key activities, milestones, dependencies, deliverables, and program risks.
• Develop, maintain, and update program and project plans, including Transition, Project Management, and Quality Control Plans, to support effective execution, governance, and continuous improvement.

Required and Desired Skills:

• Experience managing Federal IT Security projects, a team of 10 or more FTE
• Bachelor's degree in computer science, information technology, or related field
• Experience with FedRAMP compliance and certification
• Knowledge and experience using CSAM or similar Vulnerability Management Systems
• Experience with risk management, identifying risk, assessing risk, and taking steps to reduce risk to an acceptable level and assessing and mitigating risks identified within business systems and IT applications, platforms and infrastructure
• Experience with Cyber Assurance Support, ensuring response and notifications to credible threats, active and new vulnerability remediation, proper response from contractors managing applications and environments, SOC services validation to include SOC operations, tool deployment and utilization.