Responsibilities & QualificationsTekSynap is seeking a
Program Manager to join our team at
Defense Health Agency to provide cybersecurity assessment and authorization (A&A) and RMF support to NIWC Atlantic in support of Defense Health Agency Military Health System sites and JFHQ-DoDIN operations across CONUS and OCONUS environments. Program includes large-scale enterprise systems, cybersecurity validation, IV&V, RMF packages, and risk assessment execution.
REQUIRED QUALIFICATIONSExperience- 15 years cybersecurity/CND; 8 years PM; 5 years as manager of cyber projects
- Large DoD cybersecurity program leadership experience
- RMF and A&A execution experience
- DHA or MHS environment experience preferred
- Experience managing distributed workforce
- Experience supporting NIWC / NAVWAR preferred
- Strong cost, schedule, performance management experience
- Demonstrated experience supporting government agencies, customers, or contracts within federal environments. This includes the Intelligence Community (IC), Department of Defense (DoD), Federal Civil agencies, and military organizations. Prior experience supporting the same or similar contract, with an in-depth understanding of the customer environment, requirements, and operational landscape, is highly desirable.
Certifications- IAM Level III Certification preferred (e.g., CISSP, CISM, CASP)
- PMP certification preferred
Education- Bachelor's degree in Cybersecurity, IT, Engineering, Computer Science, or related field (Master's preferred)
Clearance- Secret clearance (ability to obtain TS preferred)
RESPONSIBILITIES - Serve as primary contractual point of contact with Contracting Officer, COR, and Government Program Manager
- Provide executive oversight of cybersecurity assessment and authorization (A&A) program execution across all task areas
- Direct all RMF lifecycle activities including categorization, control selection, implementation, assessment, authorization, and continuous monitoring
- Oversee enterprise cybersecurity support to DHA Military Health System environments across CONUS and OCONUS locations
- Lead development and execution of program management plans, staffing plans, and performance management approach
- Manage execution of IV&V cybersecurity validation activities across systems, enclaves, and sites
- Ensure delivery of RMF packages including SSP, SAP, SAR, POA&M, and authorization artifacts
- Provide governance over Security Control Assessor (SCA) support activities and validation efforts
- Oversee cybersecurity testing, vulnerability assessment, and remediation tracking
- Ensure compliance with DoD, DHA, DISA, and NIWC cybersecurity policies and directives
- Manage contractor personnel performing RMF documentation, test execution, and assessment activities
- Lead program-level risk management and mitigation planning
- Establish program performance metrics and reporting dashboards
- Oversee development of cost estimates, spend plans, and labor projections
- Manage subcontractor performance and integration across technical teams
- Direct coordination with system owners, PMOs, AO, SCA, and validation teams
- Oversee development of cybersecurity documentation including SOPs, test plans, and operational guides
- Ensure execution of POA&M management and remediation tracking
- Provide executive oversight of cybersecurity toolset development and automation support
- Coordinate support for DHA validation readiness reviews
- Oversee development of security assessment plans and execution of test events
- Ensure proper execution of risk assessments and residual risk analysis
- Lead weekly/monthly status reviews with Government leadership
- Oversee delivery of all CDRLs and contract deliverables
- Manage program staffing, surge support, and resource allocation
- Coordinate travel support for on-site assessments and validation activities
- Ensure quality assurance and performance monitoring across all task areas
- Provide executive briefings to Government stakeholders
- Ensure compliance with contract security and clearance requirements
- Oversee transition-in and transition-out planning
COMPETENCIES - Executive leadership
- Strategic planning
- Cybersecurity governance
- RMF oversight
- Stakeholder engagement
- Risk management
- Communication and briefing skills
- Decision making
OverviewWORK ENVIRONMENT The work environment characteristics described here are representative of those an employee encounters while performing the essential functions of the job. Reasonable accommodation may be made to enable individuals with disabilities to perform the essential functions.
- Location: North Charleston, SC area (contractor facility within 15 miles of NIWC Atlantic). Remote/telework may be approved
- Type of environment: Office environment
- Noise level: Medium
- Work schedule: Core hours (0800-1700), Monday through Friday. Occasional extended hours during testing events
- Amount of Travel: Minimal (10-25%). CONUS and OCONUS DHA sites
WORK AUTHORIZATION/SECURITY CLEARANCE
U.S. Citizen
Secret clearance (ability to obtain TS preferred)
PHYSICAL DEMANDS
The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. While performing the duties of this job, the employee is regularly required to use hands to handle, feel, touch; reach with hands and arms; talk and hear. The employee is regularly required to stand; walk; sit; climb or balance; and stoop, kneel, crouch, or crawl. The employee is regularly required to lift up to 10 pounds. The employee is frequently required to lift up to 25 pounds; and up to 50 pounds. The vision requirements include close vision, distance vision, peripheral vision, depth perception, and ability to adjust focus.
OTHER INFORMATION
Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this job. Duties, responsibilities and activities may change at any time with or without notice
