SOC Project Manager

Type of Requisition:

Regular

Clearance Level Must Currently Possess:

None

Clearance Level Must Be Able to Obtain:

None

Public Trust/Other Required:

MBI (T2)

Job Family:

Cyber and IT Risk Management

Job Qualifications:

Skills:

NIST, Project Management, Security Operations

Certifications:

None

Experience:

7 + years of related experience

US Citizenship Required:

Yes

Job Description:

General Dynamics Information Technology (GDIT) is seeking a highly skilled and experienced Security Operations Center (SOC) Project Manager to support an enterprise cyber program for one of our federal health customers. The SOC Project Manager will serve as the primary point of contact and leader for the SOC team, overseeing all aspects of the SOC’s operations and ensuring effective management of cybersecurity incidents across a hybrid on-premises/cloud environment. As a team member, the PM will work collaboratively with federal and contractor staff to ensure the SOC effectively meets the security operations requirements in a timely and comprehensive manner.

The SOC PM will be an advocate for IT security operations activities to promote greater awareness and understanding of operational cybersecurity posture.

HOW A SOC PROJECT MANAGER WILL MAKE AN IMPACT:

• Ensure that SOC operations are managed according to best business practices and Project Management International (PMI) standards.
• Continuously monitor the performance of SOC  staff in conjunction with the Contract Service Level Agreements (SLAs), including program progress, risks, issues, and proposed resolutions.
• Direct, execute, and control all elements of contractor provided SOC services and ensure that all necessary management, analysis, business, contracts, engineering, implementation, and maintenance personnel resources are available and enough, both in numbers and in qualifications, to perform all required tasks.
• Exchange information and communicate with the Government Cyber Operations personnel and Contract Officer Representative (COR) as necessary.
• Execute and provide information on the activities and milestones completed and deliverables submitted to support program reporting.
• Identify and communicate potential schedule variance, mitigation strategies, and actions taken.
• Identify and communicate issues encountered and resolution applied.
• Track and communicate information related to unresolved issues as well as their current status and actions taken.
• Establish milestones and activities that are planned for the next reporting period.
• Conduct policy and technical document reviews.
• Develop security configuration standards, standard operating procedures, and checklists, and provide updates supporting the daily activities.
• Provide requested metrics and artifacts to support reporting and audit requests.
• Track schedules including milestones and deliverables.
• Maintain risk registers and risk and issue mitigation strategies for all risks.
• Provide a plan to monitor and track program and task performance to ensure on time service delivery.
• Resolve management and programmatic issues.
• Develop staff of varying skill levels on both cybersecurity competencies/expertise and personal development. Guide in their continued growth and success as individuals and as a team.
• Participate in the development and tracking of key performance indicators (KPIs) related to SOC operations, to benchmark and further enhance capabilities.
• Perform special projects and other duties as assigned.

SOC Management:

• Oversee the day-to-day operations of the Security Operations Center, ensuring all processes and responses are conducted efficiently and effectively.
• Implement and maintain SOC policies, procedures, and processes to ensure comprehensive monitoring and incident response capabilities.
• Develop and manage key performance indicators (KPIs) to measure SOC effectiveness and provide regular reports to executive leadership.

Incident Response:

• Lead the incident response team to manage and mitigate cybersecurity incidents, including reporting and following up on security events.
• Ensure prompt detection, analysis, containment, eradication, and recovery from security incidents.
• Coordinate post-incident reviews to identify lessons learned and propose improvements.

NIST Cybersecurity Framework Implementation:

• Oversee and manage activities related to all five portions of the NIST