We are seeking an experienced Project Manager to lead the delivery of Cybersecurity Maturity Model Certification (CMMC) and related controlled-information compliance initiatives. This role will coordinate business teams, security specialists, suppliers, and other stakeholders to implement policies, access controls, records management, and workflows while ensuring project milestones, budgets, and compliance evidence are properly managed.
The Project Manager will report to the Director of Business Solutions, with day-to-day delivery direction provided by the Controlled Information Compliance team. The program sponsor will help resolve competing priorities, resource constraints, and escalated issues.
Project Planning & Execution: Maintain an integrated project portfolio, prioritized backlog, project plans, dependencies, forecasts, and risk, assumption, issue, and dependency (RAID) logs. Secure stakeholder commitments and escalate resource constraints or competing priorities as needed.
Budget & Vendor Management: Track project budgets, spending, resource requirements, vendor milestones, and commercial dependencies. Monitor variances and change requests while ensuring scope, funding, and contractual commitments receive the appropriate approvals.
Project Delivery & Governance: Coordinate approved project scope, change implementation, testing, defect resolution, business acceptance, and operational handoffs. Maintain project milestones, approval criteria, decision records, and closure documentation.
Compliance Implementation: Lead the implementation of controlled-information policies, access controls, supplier processes, records management, and workflow capabilities. Coordinate stakeholder reviews, training, adoption, dependencies, and operational readiness.
Cybersecurity Documentation & Evidence: Coordinate System Security Plan (SSP), Plan of Action and Milestones (POA&M), and assessment evidence activities with security and control owners. Maintain evidence schedules, identify documentation gaps, and validate vendor claims with the appropriate subject matter experts.
Personnel Screening & Process Coordination: Coordinate the implementation and testing of personnel-screening processes, including privacy-conscious information handoffs between authorized parties. Track overall progress, process documentation, and handoff completion without directly administering individual cases.
Stakeholder Communication & Reporting: Lead project meetings, manage follow-ups, coordinate vendors, and ensure delivery stays aligned with approved plans. Provide leadership with updates on project progress, business impact, forecasts, risks, and decisions requiring attention. Ensure significant external communications receive the appropriate authorization.
At least five years of project management experience, including substantial experience leading federal cybersecurity project delivery.
One current project delivery credential: Certified ScrumMaster (CSM), Certified Scrum Product Owner (CSPO), or a role-relevant Scaled Agile Framework (SAFe) certification.
Working knowledge of the following cybersecurity and compliance standards, frameworks, and requirements:
NIST SP 800-171 and NIST SP 800-171A, using the revisions applicable to the contract and assessment requirements.
CMMC Level 2 requirements.
Controlled Unclassified Information (CUI) and Federal Contract Information (FCI) safeguarding.
System Security Plans (SSPs), Plans of Action and Milestones (POA&Ms), and cybersecurity assessment evidence.
Applicable Defense Federal Acquisition Regulation Supplement (DFARS) requirements.
Supplier Performance Risk System (SPRS).
Demonstrated experience leading cross-functional projects, managing dependencies, budgets, vendors, and compliance evidence.
Strong judgment and communication skills, including the ability to identify unsupported claims, escalate risks, and work effectively with technical specialists while respecting their areas of responsibility.
Familiarity with current Department of Defense (DoD) cyberspace workforce qualification requirements, including DoDM 8140.03, where applicable to the contract.
