Senior Program Manager leading the C-SCRM Program at CRG. Ensuring cybersecurity risks are identified, assessed, and mitigated in collaboration with federal partners.
Responsibilities
Lead Cybersecurity Supply Chain Risk Management (C-SCRM) Program.
Ensure risks associated with third-party ICT and OT suppliers are identified, assessed, and mitigated.
Collaborate with the Department’s C-SCRM Director.
Establish/manage program goals, performance metrics, and reporting mechanisms.
Provide executive-level briefings and recommendations to senior leadership.
Identify, assess, prioritize, and mitigate C-SCRM Program risks.
Collaborate with State Department bureaus, offices, and posts, other federal agencies, and external partner organizations.
Represent and serve as a program leader in interagency cross-departmental efforts.
Manage cross-functional teams, budgets, and schedules to deliver high-quality products and services.
Requirements
Active Secret Clearance required.
Bachelor’s Degree in Information Technology, Computer Science, or related field (Master’s is preferred).
Project Management Institute (PMI) Project Management Professional (PMP) Certification is preferred.
10+ years in program/project management.
Some cybersecurity or supply chain risk management experience preferred.
Experience leading strategic planning and process improvement initiatives.
Technical experience with cloud platforms and cloud-based IT solutions and technologies.
Technical certification related to business transformation technology is preferred (i.e., Microsoft Power Platform).
5+ years of experience specifically leading projects for the (DOS) is preferred.
Strong understanding of federal acquisition regulations, contract management, including acquisitions processes.
Demonstrated self-starter with a high level of energy, proven record as a team player, outstanding communicator with demonstrated political savvy, unquestionable integrity, credibility, and character, strong leadership, team-building, critical thinking, and problem-solving skills.
Benefits
401(k) and Roth retirement plans
Medical, Dental, and Vision Insurance (for employees and families)
Supplemental Insurance
11 Federal Holidays
At least three weeks of Paid Time Off (PTO), including sick and personal leave
Job title
Senior Program Manager – Cybersecurity Supply Chain Risk Management
Consultant for Cyber Security at UNITY, advising clients on effective security strategies and implementations to build trust in digital futures. Engage in client transformation for sustainable security programs.
Cyber Security Specialist responsible for monitoring and defending against cyberattacks for an international bank in Zurich. Focus on threat intelligence, incident response, and cyber security compliance.
IT Security Specialist managing security processes and responding to incidents for a technical service company. Collaborating on internal audits and enhancing IT security strategies.
Cybersecurity Governance expert managing cybersecurity efforts for international logistics and services company. Enhancing frameworks, reporting, and conducting gap analyses and pen tests.
Head of IT Infrastructure and Security managing strategy and operations for banking IT service. Leading expert teams in IT security, infrastructure, and modernization with a focus on high availability.
Activity Security Representative providing multi - disciplined security support for Collateral and Special Access Programs. Responsibilities include document control, inbound and outbound mail processing, and personnel security maintenance.
Cybersecurity Advisor supporting Rapid7’s Managed Services and improving customer security posture. Engaging with clients to provide incident response and advisory relationships while leveraging technical knowledge.
Senior Cybersecurity Incident Responder leading response efforts to complex attacks globally for TransUnion. Collaborating with teams responsible for incident response in cloud and other environments.
Application Security Specialist at Vanguard plays a pivotal role in securing software development lifecycle. Develop strategies for technology security, ensure compliance, and maintain security tools in CI/CD pipeline.