Program Manager

Fusion Technology•San Antonio, TX

6d•Onsite

About The Position

Fusion Technology is seeking a Program Manager to support the Defense Language Institute English Language Center (DLIELC) at Lackland AFB, TX. This role requires an active DOD Secret (S) clearance and involves supporting DoD cybersecurity governance processes, RMF processes, and program management oversight. The ideal candidate will have a Bachelor's Degree, 8 years of related experience, and a strong understanding of cybersecurity documentation and compliance.

Requirements

Active DOD Secret (S) Clearance
Bachelor's Degree
8 years of related experience
Demonstrated experience supporting DoD cybersecurity governance processes including the Electronic Requirements Oversight Committee (eRoc), IT Data Oversight and Governance (IDOG), and Portfolio Management processes with associated documentation requirements.
Hands-on experience developing and coordinating Capability Requirement Solution Planning Workbook (CRSP) documentation, Information Technology Scoping Worksheets (ITCSC), Privacy Impact Assessments (PIA), Privacy Confidentiality Impact Level (PCIL) determinations, Hardware/Software Lists, and Concept of Operations (CONOPS) documents.
Working knowledge of Clinger Cohen Act (CCA) compliance, Business Enterprise Architecture (BEA) processes, Information Technology Portfolio Management System (ITIPS) registration, and Enterprise Mission Assurance Support Service (eMASS) registration and management.
Demonstrated experience supporting DoD RMF processes per DoDI 8510.01, including all seven RMF lifecycle phases (Prepare, Categorize, Select, Implement, Assess, Authorize, and Monitor) and continuous monitoring activities.
Proficiency in developing and maintaining comprehensive cybersecurity documentation including System Security Plans (SSP), Security Assessment Plans (SAP), Security Assessment Reports (SAR), Plans of Action and Milestones (POA&M), and Authorization to Operate (ATO) packages.
Advanced experience using the Enterprise Mission Assurance Support Service (eMASS) platform for security control documentation, workflow management, compliance reporting, and coordination with Information System Security Managers (ISSMs), Program Managers, and System Owners.
Working knowledge of NIST SP 800-37, NIST SP 800-53 (Rev 4 & 5), NIST SP 800-60, FIPS 199/200, and related federal cybersecurity policies, standards, and guidelines.
Excellent communication and organizational skills with demonstrated ability to coordinate with System Requirement Owners, Authorizing Officials, and cross-functional teams.
Proven ability to manage multiple cybersecurity assessment, authorization, and governance activities simultaneously while ensuring timely delivery of project objectives and maintaining quality standards.

Nice To Haves

PMP certification from an accredited institution is preferred

Responsibilities

Assist the DLIELC System Requirement Owner with navigating and executing the Cybersecurity Assurance Readiness (CSAR) and RMF Pro processes, ensuring seamless coordination across Electronic Requirements Oversight Committee (eRoc), IT Data Oversight and Governance (IDOG), and Portfolio Management workflows.
Support the Electronic Requirements Oversight Committee (eRoc) process.
Lead IT Data Oversight and Governance (IDOG) process activities including preparation of Information Technology Scoping Worksheets (ITCSC), Privacy Impact Assessments (PIA), Privacy Confidentiality Impact Level (PCIL) determinations, Hardware/Software Lists, Concept of Operations (CONOPS) documents, Information Technology (IT) Worksheets, and CRSP documentation.
Execute Portfolio Management process requirements including Information Technology Worksheet preparation, Clinger Cohen Act (CCA) compliance activities, Business Enterprise Architecture (BEA) process coordination, Information Technology Portfolio Management System (ITIPS) registration, and Enterprise Mission Assurance Support Service (eMASS) registration.
Lead and coordinate all phases of RMF.
Develop, review, and maintain System Security Plans, Security Assessment Plans and Reports, POA&Ms, Continuous Monitoring Strategies, and Authorization packages in accordance with DoD and NIST standards.
Perform data entry, updates, and reporting using eMASS; coordinate workflows with ISSMs, Program Managers, and System Owners; document technical mitigations and control implementation steps.
Monitor security control effectiveness, conduct security impact assessments for system changes, facilitate issue resolution processes, document risk-based decisions including risk acceptance and remediation actions, and maintain audit trails for management accountability.
Facilitate executive meetings, briefings, and engage with internal and external stakeholders including System Requirement Owners and AO's.
Coordinate security control assessments, vulnerability scanning activities, remediation efforts, and support preparation ATO.
Implement and maintain continuous monitoring strategies per NIST SP 800-137.
Provide centralized program management oversight to ensure effective execution of all CSAR, RMF, and cybersecurity governance activities.