A-TEK is seeking a Cyber Security Operations Center (CSOC) Program Manager to support one of our federal clients. The CSOC PM is a high-level executive responsible for establishing and maintaining an organization's information security strategy and ensuring the protection of its digital assets, data, and IT infrastructure from potential cyber threats and attacks. The CSOC PM plays a crucial role in managing and mitigating cybersecurity risks, developing security policies and procedures, and implementing security technologies and best practices. The CSOC PM collaborates closely with other departments, such as IT, legal, and compliance, to foster a strong cybersecurity culture and protect the organization's sensitive information and assets.
This position is on-site in Rockville, MD. US Citizenship is required for consideration for this role.Responsibilities:- Implementation: Develop and execute the strategic vision for the SOC, including establishing and achieving performance metrics and goals. Manage the SOC program in accordance with Contract requirements, the management plan, and work schedule.
- Coordinate all SOC program task order and all operational activities.
- Establish, document, and manage the scope, schedule, and resource allocation for projects and SOC activities.
- Cybersecurity Strategy: Establishing, developing, and implementing a comprehensive cybersecurity strategy aligned with the agency's objectives and risk tolerance.
- Risk Management: Identifying, assessing, and prioritizing potential security risks and vulnerabilities, and developing risk mitigation plans that align with Department and Federal cybersecurity initiatives.
- Security Policies and Procedures: Establishing a Security Operations Center (SOC), security policies, standards, guidelines, and procedures to ensure consistent and effective security practices across the agency against potential information technology threats and vulnerabilities; and ensuring compliance with Federal mandates and legislation, including the Federal Information Security Management Act, the President's Management Agenda, Executive Order: "Improving the Nation's Cybersecurity" and Cybersecurity and Infrastructure Security Agency (CISA) Emergency Directives.
- Incident Response and Management: Developing and leading incident response plans to address and resolve security breaches or cyber incidents effectively.
- Security Awareness and Training: Promoting cybersecurity awareness and conducting training programs to educate employees about security best practices and potential threats.
- Security Compliance: Ensuring that the organization complies with relevant industry regulations, data protection laws, and other security-related requirements.
- Security Architecture and Technology: Overseeing the selection, implementation, and management of security technologies, such as firewalls, antivirus systems, encryption tools, and intrusion detection systems.
- Reporting and Communication: Regularly communicating security-related matters to the executive team, client customer, and other stakeholders.
- Continuous Monitoring and Improvement: Continuously monitoring the security environment, staying current with emerging threats and industry trends, and making necessary adjustments to enhance the organization's security posture.
Qualifications:- Bachelor's degree in IT, Cybersecurity, Business, or related field
- US Citizenship is required.
- Experience overseeing the Cyber Security Operations Center (CSOC) security function, ensuring the organization has the right controls, tools, technology, and visibility to respond effectively to cybersecurity threats.
- Current CISSP certification is required.
- Current PMP certification is preferred.
- Strong knowledge of information security frameworks, such as NIST, ISO, and CIS
- Understanding of networking concepts and protocols, including TCP/IP, VPN, DNS, and firewalls
- Ability to collaborate with cross-functional teams, including software development, infrastructure, compliance, legal, and business stakeholders.
- Current experience working at HHS or an HHS affiliated agency is preferred (FDA, NIH, CDC, ACF, CMS, HIS, ACL, AHRQ, ARPA-H, ASPR, ATSDR, HRSA, or SAMHSA).
Compensation:Salary Range: $170,000 - $190,000 annually (commensurate with experience)
Benefits: Health, dental, and vision insurance; 401(k) with employer match; paid time off; professional development opportunities.
This is an opportunity to make a direct impact on healthcare data processes that support critical regulatory functions. You will collaborate with dedicated professionals, work on meaningful projects, and contribute to improvements in public health systems.
#LI-OnSite
Candidates may use tools (including AI) for proofreading or formatting; however, using any tool to fabricate, exaggerate, or misrepresent qualifications, experience, or work product is not permitted. We may assess application materials for job-related technical depth, internal consistency, and demonstrated hands-on experience, including through follow-up questions, skills assessments, or reference checks. Verification of education may be requested before or during the hiring process.
For security and identity verification purposes, participants may be asked to temporarily disable virtual backgrounds during portions of the call.
Misrepresentation or falsification may result in removal from further consideration. Candidates who need a reasonable accommodation in the application or interview process may request one.
