Senior Program Manager CSOC

Job description

**Empower, Innovate, Impact!** At Team A-TEK, we EMPOWER people to drive INNOVATION that IMPACTS mission! A-TEK operates at the intersection of mission and innovation by applying our deep domain expertise across the federal markets. Embracing our digital-first strategy, A-TEK provides enhanced capabilities in application development, digital transformation, enterprise IT, and scientific services. Our solutions are designed to modernize, automate, secure, protect, and enhance the operations of our federal clients, ensuring they stay ahead in a rapidly evolving digital landscape. Our work is fueled by a passion to serve our clients’ needs and to protect the safety and welfare of Americans. That passion shapes how we nurture our most valuable asset – Our Employees. A-TEK actively cultivates the talent that drives our success and fosters a creative, challenging, and mission-driven work environment for current and future employees. A-TEK is seeking a Cyber Security Operations Center (CSOC) Program Manager to support one of our federal clients. The CSOC PM is a high-level executive responsible for establishing and maintaining an organization's information security strategy and ensuring the protection of its digital assets, data, and IT infrastructure from potential cyber threats and attacks. The CSOC PM plays a crucial role in managing and mitigating cybersecurity risks, developing security policies and procedures, and implementing security technologies and best practices. The CSOC PM collaborates closely with other departments, such as IT, legal, and compliance, to foster a strong cybersecurity culture and protect the organization's sensitive information and assets. **This position is on-site in Rockville, MD. US Citizenship is required for consideration for this role.** **Responsibilities:** - Implementation: Develop and execute the strategic vision for the SOC, including establishing and achieving performance metrics and goals. Manage the SOC program in accordance with Contract requirements, the management plan, and work schedule. - Coordinate all SOC program task order and all operational activities. - Establish, document, and manage the scope, schedule, and resource allocation for projects and SOC activities. - Cybersecurity Strategy: Establishing, developing, and implementing a comprehensive cybersecurity strategy aligned with the agency’s objectives and risk tolerance. - Risk Management: Identifying, assessing, and prioritizing potential security risks and vulnerabilities, and developing risk mitigation plans that align with Department and Federal cybersecurity initiatives. - Security Policies and Procedures: Establishing a Security Operations Center (SOC), security policies, standards, guidelines, and procedures to ensure consistent and effective security practices across the agency against potential information technology threats and vulnerabilities; and ensuring compliance with Federal mandates and legislation, including the Federal Information Security Management Act, the President's Management Agenda, Executive Order: "Improving the Nation's Cybersecurity" and Cybersecurity and Infrastructure Security Agency (CISA) Emergency Directives. - Incident Response and Management: Developing and leading incident response plans to address and resolve security breaches or cyber incidents effectively. - Security Awareness and Training: Promoting cybersecurity awareness and conducting training programs to educate employees about security best practices and potential threats. - Security Compliance: Ensuring that the organization complies with relevant industry regulations, data protection laws, and other security-related requirements. - Security Architecture and Technology: Overseeing the selection, implementation, and management of security technologies, such as firewalls, antivirus systems, encryption tools, and intrusion detection systems. - Reporting and Communication: Regularly communicating security-related matters to the executive team, client customer, and other stakeholders. - Continuous Monitoring and Improvement: Continuously monitoring the security environment, staying current with emerging threats and industry trends, and making necessary adjustments to enhance the organization's security posture. **Qualifications:** - Bachelor’s degree in IT, Cybersecurity, Business, or related field - US Citizenship is required. - Experience overseeing the Cyber Security Operations Center (CSOC) security function, ensuring the organization has the right controls, tools, technology, and visibility to respond effectively to cybersecurity threats. - **Current CISSP certification is required.** - **Current PMP certification is preferred.** - Strong knowledge of information security frameworks, such as NIST, ISO, and CIS - Understanding of networking concepts and protocols, including TCP/IP, VPN, DNS, and firewalls - Ability to collaborate with cross-functional teams, including software development, infrastructure, compliance, legal, and business stakeholders. - Current experience working at HHS or an HHS affiliated agency is preferred (FDA, NIH, CDC, ACF, CMS, HIS, ACL, AHRQ, ARPA-H, ASPR, ATSDR, HRSA, or SAMHSA). **Compensation:** **Salary Range:** $170,000 – $190,000 annually (commensurate with experience) **Benefits:** Health, dental, and vision insurance; 401(k) with employer match; paid time off; professional development opportunities. **Why Join Us?** This is an opportunity to make a direct impact on healthcare data processes that support critical regulatory functions. You will collaborate with dedicated professionals, work on meaningful projects, and contribute to improvements in public health systems. #LI-OnSite Candidates may use tools (including AI) for proofreading or formatting; however, using any tool to fabricate, exaggerate, or misrepresent qualifications, experience, or work product is not permitted. We may assess application materials for job-related technical depth, internal consistency, and demonstrated hands-on experience, including through follow-up questions, skills assessments, or reference checks. Verification of education may be requested before or during the hiring process. For security and identity verification purposes, participants may be asked to temporarily disable virtual backgrounds during portions of the call. Misrepresentation or falsification may result in removal from further consideration. Candidates who need a reasonable accommodation in the application or interview process may request one. **A-TEK, Inc. is an Equal Opportunity/Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, or status as a qualified individual with a disability, or Vietnam era or other protected Veteran status.**