5-7 years managing cybersecurity services in an -aaS model such as SOCaaS or GRCaaS
10+ years of GRC experience in roles like ISSO, ISSE, or ISSM
2+ active program management or cybersecurity certifications (PMP, CISSP, etc.)
2+ years experience with JCAM
Bachelor's degree or equivalent experience in a related field
Familiarity with FISMA and NIST protocols, and IT security audits
Exceptional interpersonal and communication skills for stakeholder engagement
Responsibilities
Manage the portfolio of GRC Shared Services for federal clients
Mature and expand service offerings, including marketing and technical proposals
Provide expertise in shared services and program strategy
Interpret technical requirements and resolve issues with stakeholders
Lead quality management processes for deliverables
Perform resource capacity planning to meet future needs
Negotiate resource allocation across technical teams
Support onboarding and offboarding processes for new customers
Benefits
Career growth opportunities
Supportive team environment
Opportunity to work with high-level government clients
Engage in continuous improvement initiatives
Utilization of cutting-edge cybersecurity tools
Full Job Description
4383 Program Manager of ISSO Services 4383 | Top Secret
Job Description:
OVERVIEW:
We are seeking a Customer Success Program Manager to support a cabinet-level client in Washington DC. The selected individual will oversee all aspects of delivering GRC services to interdepartmental and external Federal agencies in an -aaS model. Exceptional interpersonal and communication skills are required.
GENERAL DUTIES:
Independently manage the entire portfolio of GRC Shared Services being delivered on behalf of the client to interdepartmental and external Federal agencies, including administration, governance, growth and adoption, financial management, cost models, service delivery, continuous improvement, and the service portfolio itself.
Maintain and mature the existing portfolio of GRC service offerings; recommend, develop, and sell new GRC services including pipeline, marketing, capability briefings, and technical and price proposals for prospective new end customers.
Provide Shared Services subject matter expertise including recommending program strategy and guidelines, leading operational improvements, and ensuring exceptional customer relationship management.
Provide GRC subject matter expertise to interpret technical requirements, brief program and client leadership, and resolve technical issues with stakeholders.
Lead quality management of shared services work products and deliverables, establish processes and monitor to ensure end customer SLAs are met, and support share services program audits.
Perform capacity planning to ensure current and future resource needs are met.
Negotiate resource utilization within and between teams providing technical shared services support.
Establish processes and support on- and offboarding of new shared services customers to ensure exceptional customer experience and the highest levels of satisfaction.
Recommend and complete special projects to continuously mature the program and its underlying elements.
REQUIRED QUALIFICATIONS:
Minimum one (1) managing cybersecurity service delivery in an -aaS model (e.g., SOCaaS, GRCaaS)
Minimum ten (10) years of hands-on GRC experience, e.g., as an ISSO/ISSE/ISSM, SCA.
At least two (2) active, high-level program management and/or cybersecurity certifications such as PMP, CISSP, CISM, CEH, CASP, CCSP, CCSK, or Security+.
Minimum two (2) years of hands-on experience with JCAM
Bachelors Degree in a related field, or four (4) additional years of related experience
Intimate familiarity with FISMA, NIST 800-53, RMF, FedRAMP, SA&A, IT security audits, vulnerability and POA&M remediation, executive orders and directives, BODs, and OMB cyber memoranda
Exceptional interpersonal skills to establish and maintain positive working relationships with all stakeholders
Expert-level command of the English language (oral and written), with experience interacting effectively at the CIO and CISO levels of large organizations
Expert-level organizational skills and ability to keep a multitude of tasks and projects on track at all times and with minimal supervision
Experience with cybersecurity tools such as vulnerability management, vulnerability scanning, endpoint management, data protection, SIEM, and GRC automation platforms
DESIRED QUALIFICATIONS:
Masters degree or higher in cybersecurity, information assurance, or related
New Jersey Transit Corporation, branded as NJ Transit, is a state-owned public transportation system that serves the US state of New Jersey, along with portions of New York State and Pennsylvania. It operates bus, light rail, and commuter rail services throughout the state, connecting to major commercial and employment centers both within the state and in the adjacent major cities of New York and Philadelphia. NJ Transit also provides bus service to the Port Authority Bus Terminal in Manhattan. NJ Transit is headquartered in Newark, New Jersey.