Hybrid IT Security Project Manager at The Computer Merchant, LTD.

Quincy, MA 02170

About the Job

JOB TITLE: Hybrid IT Security Project Manager
JOB LOCATION: Hybrid Quincy MA
WAGE RANGE*: $75 hr to $79.70 hr (based on a 37.5 hour work week)
JOB NUMBER: ITS77_EHS_FY24_PROJ MAN – 320 – SEC&COMPL

REQUIRED EXPERIENCE:

Preferred Knowledge, Skills, and Abilities:

Minimum of 5 (five) years of experience in technical project management.
Strong operational and project management skills, including PMI and Agile project management experience in all software development lifecycle methodologies.
Able to foster a collaborative work environment and demonstrate excellent leadership skills.
Possess prior experience in Security and/or Compliance with some familiarity with NIST Risk Management, FIPS 199, 200, NIST 800-53 Security and Privacy Controls, NIST 800-60 Mapping Types of Information and Information Systems to Security Categories.
Possess strong organizational, presentation and customer service skills.
Possess excellent problem-solving and team collaboration skills as required in project environments.
Proven track record in driving complex projects of managing or maintaining businesses applications to newer cloud platforms.
Experience in ethically maintaining the confidentiality of sensitive information or discussions.
Proficiency with Microsoft Office, MS Project and MS Visio and collaboration tools.

Education/Certifications:

Bachelor's Degree in Computer Science, Computer Information Systems, Information Management, or equivalent work experience.
Project Management Certification (PMP), (PMI), or Agile Project Management Certification is preferred, but not required.

JOB DESCRIPTION

The Executive Office of Health and Human Services, CISO's Office seeks a highly motivated Senior Project Manager familiar with annual processes around Risk Management, Compliance, Information System identification, and the Classification of Information assets.
The primary work location for this role will be 100 Hancock Street, Quincy, Massachusetts 02171. The work schedule for this position is Monday through Friday, 9:00AM to 5:00PM EST. This position would be expected to follow a hybrid model of reporting to work that combines in-office workdays and work from home days as needed. Candidates should be local only (New England).

List of Duties and Responsibilities:

Responsible for overall coordination, facilitation, elicitation, and aggregation of status reporting and status of health of the project.
Develop and Manage the Information Security Stakeholder contact list to the different Agencies and Programs.
Review project plans: to include estimation of time, equipment, and staff resource requirements by business each business area under review plan for the proposed business areas, their systems and data classification. Ensuring all projects and milestones are delivered on time and within the stipulated scope and budget.
Lead the initiation, planning, and outcomes in collaboration with delivery teams.
Lead the tracking and follow-up of risks, issues, and constraints, escalate where appropriate.
Coordinate with internal and external parties for the execution of required activities according to project defined requirements.
Manage relationships between internal teams, outside subject matter experts, and stakeholders.
Manage, influence, and guide business and technical leads in the priorities that lead to the successful completion of requirements and policies.
Lead activities to ensure the review, acceptance, approval and submittal of vendor invoices.
Help lead and schedule kick-off meeting with the EOHHS business areas to establish a mutual understanding of the engagement objectives, timeline, roles, and deliverables.
Review the top-down (process based) approach to identify sensitive data across the organization. Including monitoring and helping with the Data discovery surveys to be distributed to the key business process owners and stewards.
Help lead the Subject Matter Experts to classify data assets through standardized questionnaires, distributing the questionnaires to the right stakeholders, aggregating responses, and using the responses to prioritize the most important data assets in each agency.
Facilitate workshops for the Compliance Vendor with the many business teams to introduce stakeholders for various business processes with the assessment questionnaire.
Liaison with the Compliance vendor as one of the key Points of Contact (POC), to provide help to the business areas for them to respond the vendor's questionnaires in a timely fashion.
Ensure vendor and internal teams understand the Executive Office of Technology Services and Security (EOTSS) Enterprise Security Policies and Standards IS.004 Asset Management standard, as well as further classification criteria to the level of specificity required by EOHHS.
Manage the Project Repository (SharePoint, Jira or some other method) to ensure all artifacts are collected, version controlled, and available upon request (examples: Excel files, Word, Vision diagrams, Plan of Actions, Reports, other Project Assets, etc.).

Equal Opportunity Employer Veterans/Disabled

* While an hourly range is posted for this position, an eventual hourly rate is determined by a comprehensive salary analysis which considers multiple factors including but not limited to: job-related knowledge, skills and qualifications, education and experience as compared to others in the organization doing substantially similar work, if applicable, and market and business considerations. Benefits offered include medical, dental and vision benefits; dependent care flexible spending account; 401(k) plan; voluntary life/short term disability/whole life/term life/accident and critical illness coverage; employee assistance program; sick leave in accordance with regulation. Benefits may be subject to generally applicable eligibility, waiting period, contribution, and other requirements and conditions.