Cybersecurity Project Manager

The Greentree Group•Austin, TX

1d•$125,000 - $145,000•Hybrid

About The Position

The Greentree Group is seeking an experienced Cybersecurity Project Manager to lead a complex cybersecurity assessment program supporting a public sector client in Austin, TX. This role will be responsible for planning, managing, and overseeing cybersecurity assessment activities conducted in accordance with CMS security and privacy requirements, including the Acceptable Risk Controls for ACA, Medicaid, and Partner Entities (ARC-AMPE) framework and applicable NIST standards. The successful candidate will lead assessment teams, manage project schedules and deliverables, coordinate stakeholder communications, and ensure the successful execution of security assessment and authorization activities. The ideal candidate is a proactive leader who can effectively manage technical teams, communicate with executive stakeholders, translate complex cybersecurity concepts into actionable recommendations, and drive projects to successful completion while maintaining the highest standards of quality and compliance.

Requirements

Strong verbal, written, and presentation skills.
Excellent interpersonal skills with the ability to work effectively with customers, executive leadership, technical teams, and third-party stakeholders.
Knowledge of cybersecurity industry standards, frameworks, and best practices.
5+ years of experience supporting Security Control Assessments (SCAs), security authorizations, or related cybersecurity compliance activities.
Experience conducting or overseeing technical security audits and assessments for large, complex systems.
Experience presenting security control requirements, assessment results, risks, and deficiencies to both technical and non-technical audiences.
5+ years of project management experience leading cybersecurity, compliance, or assessment engagements.
Experience developing and managing project schedules, budgets, staffing plans, and client deliverables.
Experience identifying, tracking, and mitigating project and cybersecurity risks.
Working knowledge of NIST SP 800-series publications, including assessment of NIST SP 800-53 security controls.
Ability to effectively communicate IT and cybersecurity risks to executive leadership and client stakeholders.
Ability to work independently and lead multidisciplinary teams in a dynamic client environment.
Bachelor's degree from an accredited college or university.
U.S. Citizenship required.

Nice To Haves

Experience leading CMS, HHS, or other federal cybersecurity assessment and authorization projects.
Experience supporting Authority to Connect (ATC), Authority to Operate (ATO), continuous monitoring, or related security authorization activities.
Familiarity with CMS ARC-AMPE requirements and controls, as well as legacy MARS-E 2.2 frameworks.
Experience managing distributed assessment teams, subcontractors, and quality review activities.
PMP certification.
CISSP, CISM, CISA, or equivalent cybersecurity certification.
Previous experience supporting government healthcare, Medicaid, Medicare, or health insurance exchange systems.

Responsibilities

Lead the planning, execution, and delivery of cybersecurity assessment projects, ensuring adherence to contractual requirements, schedules, budgets, and quality standards.
Manage multidisciplinary assessment teams responsible for evaluating administrative, technical, and operational security controls.
Coordinate security assessment activities conducted under CMS ARC-AMPE, NIST SP 800-53, and other applicable federal and state cybersecurity requirements.
Develop and maintain project management artifacts, including project schedules, risk registers, status reports, action item logs, and executive briefings.
Facilitate meetings and communication between client leadership, technical stakeholders, assessors, and other project participants.
Oversee the development and delivery of assessment documentation, including Security Assessment Plans (SAPs), Security Assessment Reports (SARs), Plan of Action and Milestones (POA&Ms), and other required deliverables.
Identify project risks, issues, dependencies, and resource constraints, and develop appropriate mitigation strategies.
Present technical findings, compliance gaps, and risk-based recommendations to both technical and executive audiences.
Support continuous improvement efforts by identifying opportunities to enhance assessment methodologies, project execution processes, and client outcomes.
Ensure project teams maintain compliance with established cybersecurity, privacy, and quality assurance requirements.
Serve as a trusted advisor to the client, helping leadership understand cybersecurity risks, prioritize remediation efforts, and make informed decisions regarding the protection of critical systems and sensitive data.