Project Manager, Waiver and Equivalency Review

OneZero Solutions; Washington (District of Columbia); Hybrid; USD 95,000 - 135,000; Full time

Job summary

OneZero Solutions, LLC seeks a Project Manager, Waiver and Equivalency Review to lead a regulatory review team reviewing waiver requests under 33 CFR Part 101 Subpart F within a maritime security framework.

The role emphasizes leadership, NIST CSF proficiency, and USCG coordination with remote US-based work; DoD 8140 credentials are a plus.

Qualifications

• One year of experience in a team leadership or project management role.
• Detailed understanding of 33 CFR Subchapter H, specifically Part 101 Subpart F, and maritime operational environments.
• Proficiency in applying NIST CSF cybersecurity frameworks.
• Three years of experience in maritime security/operations or cybersecurity policy/compliance.
• At least one DoD 8140 DCWF intermediate credential (e.g., CISA, CGRC, CISSP).

Responsibilities

• Manage the Waiver and Equivalency Reviewer team, including assignment and workload balancing.
• Lead for resolving and providing final recommendations on complex waiver requests.
• Ensure Stage One reviews are completed within ten business days and all deficiencies are clearly communicated.
• Ensure Stage Two reviews assess regulatory requirements and justification grounded in cybersecurity assessments.
• Ensure Stage Three packets are prepared for USCG review with complete checklists and draft analyses.
• Coordinate with Senior SME on equivalency and waiver questions and approvals.
• Prepare signature-ready correspondence for USCG and update MISLE/SharePoint/ServiceNow records daily.
• Provide workload and aging inputs for status reports and escalate policy inquiries.

Skills

Team leadership

33 CFR Part 101 Subpart F

NIST CSF

Cybersecurity policy/compliance

Security Control Assessor credential

Education

Bachelor's degree

Tools

MISLE

SharePoint

ServiceNow

Job description

We are an employee-centric company that truly values our team members and the contributions they make to our customers and the missions they support. We pride ourselves on being forward-leaning thinkers and on building teams that are, and continue to be, technically proficient across a broad range of cyber mission areas. OneZero full-time employees receive a highly competitive benefits package, including health, dental, vision, and life insurance, a 401(k) with company matching, paid time off and holidays, an employee referral program, and educational assistance. Additional details are available on our website: https://www.onezerollc.com/careers/

Position Title

Project Manager, Waiver and Equivalency Review

Location

Remote (United States)

Security Clearance

• No security clearance is required. This work is performed at the Controlled Unclassified Information (CUI) level.
• S. citizenship is required. All personnel must undergo and successfully pass, at minimum, a Tier 1 background investigation (or equivalent) and be favorably adjudicated.

Position Summary

The Sub-Project Manager, Waiver and Equivalency Review leads the team responsible for reviewing waiver and equivalency requests submitted under 33 CFR Part 101 Subpart F. This position manages the Waiver and Equivalency Reviewers and serves as the lead for resolving and providing the final recommendation on complex or novel waiver requests. This is a designated Key Personnel position; the Government must acknowledge any replacement in writing.

Key Responsibilities

• Manage the Waiver and Equivalency Reviewer team, including assignment, prioritization, and workload balancing.
• Serve as the lead for resolving and providing the final recommendation on complex or novel waiver requests.
• Ensure Stage One cursory reviews are completed within ten (10) business days of assignment and that incomplete submittals are identified with draft signature-ready correspondence stating each deficiency or information gap and resubmission instructions.
• Ensure Stage Two detailed technical reviews evaluate whether each waiver request identifies the specific regulatory requirement at issue, provides justification grounded in the Cybersecurity Assessment, includes sufficient supporting documentation, and demonstrates that granting the waiver would not materially and adversely affect safety or security.
• Ensure detailed review and quality control are completed within forty-five (45) calendar days of receipt of a complete submittal.
• Ensure Stage Three consolidated packages are prepared for the USCG representative and subsequent operational review by the cognizant Captain of the Port, including the complete request, the fully annotated checklist with scoring, and a draft technical analysis with a preliminary recommendation of Grant, Grant with Conditions, or Deny derived from the Government-furnished decision matrix.
• Coordinate closely with the Senior SME, Equivalency on all equivalency requests and on waiver requests raising OT or ICs technical questions.
• Ensure signature-ready correspondence is prepared for USCG signature and processed within one business day of signature, and that final dispositions are recorded and filed.
• Ensure MISLE, SharePoint, and ServiceNow records are updated before the close of the following business day for every status change.
• Provide workload and aging inputs to the weekly and monthly status reports.
• Refer all policy-related inquiries and all requests for expedited handling to the designated USCG representative.
• Identify and report to the Project Manager any submitter that may present an organizational conflict of interest.

Required Qualifications

• One (1) year of experience in a team leadership or project management role.
• A detailed understanding of 33 CFR Subchapter H, specifically 33 CFR Part 101 Subpart F, and knowledge of maritime operational environments for both vessels and facilities.
• Proficiency in applying industry-standard cybersecurity frameworks such as NIST CSF.
• Three (3) years of experience demonstrating proficiency in maritime security or operations, or three (3) years of experience in cybersecurity policy or compliance.
• At least one cybersecurity certification satisfying the certification requirement for the DoD 8140 DCWF work role of Security Control Assessor (612) at the Intermediate proficiency level (for example CISA, CGRC, or CISSP - confirm against the current DoD 8140 qualification matrix).
• Must disclose, for organizational conflict of interest screening, any current or prior engagement performed for MTSA-regulated vessel, facility, or Outer Continental Shelf facility owners or operators involving cybersecurity plan development, cybersecurity assessment, or related advisory services.

Preferred Qualifications

• Certification satisfying the Security Control Assessor requirement at the Advanced proficiency level.
• Prior U.S. Coast Guard, DHS, or MTSA regulatory experience, including familiarity with Captain of the Port coordination.
• Experience adjudicating or recommending on exception, deviation, waiver, or risk acceptance requests.
• Familiarity with OT and IC environments.
• Experience preparing decision packages for a Government approving official.

Technical Skills

• Decision matrix and checklist-based evaluation methods.
• Risk analysis and articulation of residual risk for a decision authority.
• NIST Cybersecurity Framework and NIST SP 800-series guidance.
• USCG MISLE, SharePoint, and ServiceNow, or comparable case management systems.
• CUI and SSI handling in accordance with 49 CFR Part 1520 and DHS MD 11042.1.

Education

Bachelor's degree in cybersecurity, information technology, maritime studies, or a related field preferred. Equivalent experience considered.

OneZero Solutions, LLC is an Equal Opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, pregnancy, genetic information, disability, status as a protected veteran, or any other protected category under applicable federal, state, and local laws.

To request an accommodation, please contact us at [e-mail] or call [phone].