Senior Cyber Security Program Manager

Oneida Technical Solutions, LLC (OTS), was founded in 2014 and quickly established itself as a reliable partner capable of providing a variety of information technology and cyber solutions across highly complex, highly regulated and highly secure environments, including the U.S. Department of Defense (DoD), healthcare, higher education, law enforcement, retail, casino gaming and more.

Our innovative cyber capabilities and programs have made us trusted partners for IT modernization projects, implementing upgrades and accelerating the delivery of new solutions for the DoD and commercial industries with consumer-driven technology.

We are currently seeking an experienced Senior Cyber Security Project Manager to oversee our current contract at The US Military Academy at West Point.

Position Title: Senior Cyber Security Project Manager

Location: The U.S. Military Academy at West Point (West Point, NY)

Reporting To: Director of Government Programs

Overview:

We are seeking a highly skilled Senior Cyber Security Project Manager fluent in NIST SP 800-53 and RMF to oversee and execute critical cyber security initiatives. The ideal candidate will have a deep understanding of NIST SP 800-53 and RMF processes and possess the expertise to enhance cyber security operations and compliance within the organization.

Responsibilities:

• Analyze data trends and patterns to identify potential cybersecurity risks and vulnerabilities.
• Generate detailed reports on cyber security assessments, compliance status, and remediation progress.
• Develop metrics and key performance indicators (KPIs) to measure the effectiveness of cyber security initiatives.
• Conduct regular audits and assessments to ensure adherence to NIST SP 800-53 and RMF guidelines.
• Provide actionable insights and recommendations based on data analysis to enhance cyber security posture.
• Prepare executive-level reports highlighting key findings, trends, and areas for improvement.
• Collaborate with cross-functional teams to gather and analyze data for cyber security reporting purposes.
• Communicate analytical findings to stakeholders at various organizational levels for informed decision-making.
• Feel free to customize these points further based on the specific requirements of the job role. Let me know if you need additional details or modifications.
• Monitor Cyber and RMF electronic mailboxes and communications for information, taskings, requests for information, and coordination of remediation and mitigations of identified risks.
• Secure and incorporate evidence, known as 'artifacts,' within eMASS and RMF processes to provide evidence to external auditors of continuous assessment in compliance with RMF. Assist in the development and maintenance of such artifacts in collaboration with the CIO/G6 and other Academy stakeholders.
• Schedule and conduct assessments of systems within the accreditation boundary of the organization. Communicate assessment results to system owners following CIO/G6 SOPs. Coordinate with system owners and chains of command to address findings, mitigate risks, and ensure compliance. Communicate findings across different levels of command, from system owners to the Superintendent.
• Develop and assist in the automation of repetitive tasks and processes to streamline cyber operations effectively.
• Track and perform annual re-evaluation of cyber regulations, policies, guidelines, standards, and procedures, implementing updates as necessary.
• Act as a Cybersecurity Project Manager to ensure timely processing of cybersecurity branch tasks and missions.
• Update and manage privacy impact assessments and related documentation such as the System of Record Notice (SORN), ensuring timely processing for document updates and signatures.
• Maintain and track supporting packages, including DISA SNAP, DISA NIPRNet Federated Gateway (NFG), Virtual Private Network (VPN) in support of the organization's Wireless Resilient Emergency Network (WREN) and missions.
• Design, conduct, and analyze data resulting from USMA specific Cybersecurity education efforts. Conduct longitudinal studies to evaluate the effectiveness of training programs and educational experiences at the Academy, providing recommendations for educational and remedial training adjustments. Evaluate courseware adjustments to ensure educational objectives are met.

Qualifications: