Requisition #: 0060111021

Job Title: Program Manager

Job Description:

Description:

Leads, coordinates, communicates, integrates, and is accountable for the overall success of the program, ensuring alignment with agency or enterprise priorities

Tasks:

• Develop and maintain strategic plans
• Develop methods to monitor and measure risk, compliance, and assurance efforts
• Perform needs analysis to determine opportunities for new and improved business process solutions
• Provide enterprise cybersecurity and supply chain risk management guidance for development of the Continuity of Operations Plans
• Resolve conflicts in laws, regulations, policies, standards, or procedures
• Review or conduct audits of information technology (IT) programs and projects
• Evaluate the effectiveness of procurement function in addressing information security requirements and supply chain risks through procurement activities and recommend improvements
• Develop and document supply chain risks for critical system elements, as appropriate
• Ensure the effectiveness of procurement function in addressing information security requirements consistent with organization goals
• Develop contract language to ensure supply chain, system, network, and operational security are met
• Act as a primary stakeholder in the underlying information technology (IT) process owners supporting the service, assisting with the definition and agreement of Operating Level Agreements (OLAs)
• Participate in the acquisition process as necessary
• Conduct import/export reviews for acquiring systems and software
• Develop supply chain, system, network, performance, and cybersecurity requirements
• Ensure that supply chain, system, network, performance, and cybersecurity requirements are included in contract language and delivered.
• Identify and address cyber workforce planning and management issues (e.g. recruitment, retention, and training)
• Lead and oversee budget, staffing, and contracting
• Draft and publish supply chain security and risk management document

Knowledge:

• Computer networking concepts and protocols, and network security methodologies
• Risk management processes (e.g., methods for assessing and mitigating risk)
• Laws, regulations, policies, and ethics as they relate to cybersecurity and privacy.
• Cybersecurity and privacy principles
• Cyber threats and vulnerabilities
• Specific operational impacts of cybersecurity lapses
• Information technology (IT) architectural concepts and frameworks
• Risk Management Framework (RMF) requirements
• Resource management principles and techniques
• System life cycle management principles, including software security and usability
• The organization's enterprise information technology (IT) goals and objectives
• How information needs and collection requirements are translated, tracked, and prioritized across the extended enterprise
• Supply Chain Risk Management Practices (NIST SP 800-161)
• The organization's core business/mission processes
• import/export control regulations and responsible agencies for the purposes of reducing supply chain risk
• Supply chain risk management standards, processes, and practices
• Functionality, quality, and security requirements and how these will apply to specific items of supply (i.e., elements and processes)
• Risk threat assessment
• Information technology (IT) supply chain security and supply chain risk management policies, requirements, and procedures
• Cloud-based knowledge management technologies and concepts related to security, governance, procurement, and administration
• Import/Export Regulations related to cryptography and other security technologies
• Organizational process improvement concepts and process maturity models (e.g., Capability Maturity Model Integration (CMMI) for Development, CMMI for Services, and CMMI for Acquisitions)
• Service management concepts for networks and related standards (e.g., Informational Technology Infrastructure Library, current version [ITIL]).
• How to leverage research and development centers, think tanks, academic research, and industry systems
• Informational technology (IT) acquisition/procurement requirements
• Acquisition/procurement life cycle process.

Skills:

• Identifying measure or indicators of system performance and the actions needed to improve or correct performance, relative to the goals of the system
• Translate, track, and prioritize information needs and intelligence collection requirements across the extended enterprise
• PMP Certification

Abilities:

• Apply supply chain risk management standards
• Oversee the development and update of the life cycle cost estimate
• Evaluate/ensure the trustworthiness of the supplier and/or product
• Ensure security practices are followed throughout the acquisition process

Clearance:

• TS/SCI with CI Poly

Please fill out the short application form below. If you have applied for a position with RiVidium in the past, we will know by querying your email address within our database once you submit the form. At that time we will ask you if you would like to use the resume we have on file to apply for the position described above. You will also have the option to submit a new resume if you wish to do so.