Program Manager, Cybersecurity & Privacy (O-5 Billet) Non-Supervisory

PHYSICAL DEMANDS: Sitting and/or standing for extended periods of time, generally six to eight hours. Performing repeated bending motions as needed. Average manual dexterity for computer operation and handling routine office equipment. Telephone and virtual meeting participation for extended periods. Occasional travel may be required in support of CAMS, HITU, IHSC, and unit mission requirements.

DUTIES AND RESPONSIBILITIES: Leads an assigned portfolio of cybersecurity and privacy compliance projects, systems, acquisitions, and workstreams. Serves as the primary point of accountability for coordination, progress monitoring, and issue identification within the assigned portfolio. Develops and maintains milestone schedules for assigned projects and workstreams.

Tracks project status, dependencies, constraints, deliverables, and schedule risks; identifies potential slippage early enough to support intervention and resolution. Supports authorization activities for assigned systems, including coordination and tracking of Risk Management Framework (RMF) documentation, security artifacts, plans of action and milestones, evidence, and related authorization packages.

Coordinates with System Owners, Authorizing Officials, Federal Information System Security Officers, Office of the Chief Information Officer cybersecurity authorities, privacy officials, acquisition personnel, contracting personnel, and contractor support staff to ensure required input is obtained, considered, documented, and acted upon. Identifies cybersecurity and privacy implications early in project and acquisition planning.

Coordinates privacy reviews and tracks formal privacy determinations, assessments, and resulting actions from the appropriate privacy officials. Works with the Acquisition Planning Office and other stakeholders to identify and incorporate cybersecurity and privacy requirements into acquisition planning, requirements documentation, statements of work, performance work statements, and related acquisition artifacts before referral to contracting.

Ensures cybersecurity and privacy requirements identified during planning are carried forward through contract performance, oversight, system implementation, and lifecycle management. Coordinates contractor-provided cybersecurity support through appropriate Government channels. Preserves Government decision-making authority and does not issue formal direction to contractor personnel unless separately authorized.

Identifies, assesses, documents, and escalates cybersecurity, privacy, compliance, and schedule risks within the assigned portfolio. Provides recommendations and clearly explains potential programmatic, cost, schedule, operational, and mission impacts. Coordinates with the Portfolio Management Office to ensure assigned milestones, dependencies, constraints, risks, and resource considerations are accurately reflected in enterprise schedules, planning activities, and portfolio reporting.

• Maintains complete, retrievable, accurate, and protected compliance records that are traceable to the decisions, determinations, and actions they support.
• Develops status reports, briefings, dashboards, correspondence, and other written products for the CCO Supervisory Lead and relevant stakeholders.
• Communicates technical and compliance issues in clear, concise, programmatically relevant terms.

Participates in meetings, working groups, acquisition planning sessions, and program reviews as a cybersecurity and privacy compliance coordination representative for assigned work. Remains flexible and able to adapt to changing priorities, schedules, work requirements, and mission needs. Performs other duties as assigned.