Senior Program Manager CSOC

A-TEK Inc.•Rockville, MD

4d•$170,000 - $190,000•Onsite

About The Position

Empower, Innovate, Impact! At Team A-TEK, we EMPOWER people to drive INNOVATION that IMPACTS mission! A-TEK operates at the intersection of mission and innovation by applying our deep domain expertise across the federal markets. Embracing our digital-first strategy, A-TEK provides enhanced capabilities in application development, digital transformation, enterprise IT, and scientific services. Our solutions are designed to modernize, automate, secure, protect, and enhance the operations of our federal clients, ensuring they stay ahead in a rapidly evolving digital landscape. Our work is fueled by a passion to serve our clients’ needs and to protect the safety and welfare of Americans. That passion shapes how we nurture our most valuable asset – Our Employees. A-TEK actively cultivates the talent that drives our success and fosters a creative, challenging, and mission-driven work environment for current and future employees. A-TEK is seeking a Cyber Security Operations Center (CSOC) Program Manager to support one of our federal clients. The CSOC PM is a high-level executive responsible for establishing and maintaining an organization's information security strategy and ensuring the protection of its digital assets, data, and IT infrastructure from potential cyber threats and attacks. The CSOC PM plays a crucial role in managing and mitigating cybersecurity risks, developing security policies and procedures, and implementing security technologies and best practices. The CSOC PM collaborates closely with other departments, such as IT, legal, and compliance, to foster a strong cybersecurity culture and protect the organization's sensitive information and assets. This position is on-site in Rockville, MD. US Citizenship is required for consideration for this role.

Requirements

Bachelor’s degree in IT, Cybersecurity, Business, or related field
US Citizenship is required.
Experience overseeing the Cyber Security Operations Center (CSOC) security function, ensuring the organization has the right controls, tools, technology, and visibility to respond effectively to cybersecurity threats.
Current CISSP certification is required.
Strong knowledge of information security frameworks, such as NIST, ISO, and CIS
Understanding of networking concepts and protocols, including TCP/IP, VPN, DNS, and firewalls
Ability to collaborate with cross-functional teams, including software development, infrastructure, compliance, legal, and business stakeholders.

Nice To Haves

Current PMP certification is preferred.
Current experience working at HHS or an HHS affiliated agency is preferred (FDA, NIH, CDC, ACF, CMS, HIS, ACL, AHRQ, ARPA-H, ASPR, ATSDR, HRSA, or SAMHSA).

Responsibilities

Develop and execute the strategic vision for the SOC, including establishing and achieving performance metrics and goals.
Manage the SOC program in accordance with Contract requirements, the management plan, and work schedule.
Coordinate all SOC program task order and all operational activities.
Establish, document, and manage the scope, schedule, and resource allocation for projects and SOC activities.
Establishing, developing, and implementing a comprehensive cybersecurity strategy aligned with the agency’s objectives and risk tolerance.
Identifying, assessing, and prioritizing potential security risks and vulnerabilities, and developing risk mitigation plans that align with Department and Federal cybersecurity initiatives.
Establishing a Security Operations Center (SOC), security policies, standards, guidelines, and procedures to ensure consistent and effective security practices across the agency against potential information technology threats and vulnerabilities; and ensuring compliance with Federal mandates and legislation, including the Federal Information Security Management Act, the President's Management Agenda, Executive Order: "Improving the Nation's Cybersecurity" and Cybersecurity and Infrastructure Security Agency (CISA) Emergency Directives.
Developing and leading incident response plans to address and resolve security breaches or cyber incidents effectively.
Promoting cybersecurity awareness and conducting training programs to educate employees about security best practices and potential threats.
Ensuring that the organization complies with relevant industry regulations, data protection laws, and other security-related requirements.
Overseeing the selection, implementation, and management of security technologies, such as firewalls, antivirus systems, encryption tools, and intrusion detection systems.
Regularly communicating security-related matters to the executive team, client customer, and other stakeholders.
Continuously monitoring the security environment, staying current with emerging threats and industry trends, and making necessary adjustments to enhance the organization's security posture.