Senior Technical Program Manager, True Anomaly

• 7+ years of directly related experience in IT security assessment
• Demonstrated understanding of NIST SP 800-171, NIST SP 800-53 (RMF IL5 and IL6)
• Verify and document the implementation of security controls necessary to achieve compliance
• Experience building and rolling out compliance policies
• At least 5 years of experience developing security standards, guidelines, and remediation planning based on best practices and industry
• Comprehensive understanding of incident response, system configuration, vulnerability management, and hardening guidelines within the DoD context
• Position requires an active security clearance. While all clearances levels will be considered, TS/SCI clearance holders are preferred

Desirable

• We are seeking an experienced Sr. Technical Program Manager (TPM) of Governance, Risk, and Compliance (GRC) to join our GRC team at True Anomaly. The Sr. TPM will be a crucial asset in ensuring the security and compliance of our products.
• The ideal candidate should possess a minimum of 7 years of experience implementing RMF (DoD IL5 and IL6), and CMMC. Additionally, the Sr. TPM must have experience with coordinating internal/external assessments, policy development, and cloud security best practices
• Conduct information technology compliance assessments across various frameworks to include, but not limited to:
• NIST SP 800-53 Rev. 5, RMF (DoD IL5, IL6)
• NIST SP 800-171 Rev. 2 and 3, CMMC Level 3
• Framework for Improving Critical Infrastructure Cybersecurity - NIST Cybersecurity Framework (CSF)
• STIG development and review experience
• Strong AWS and Azure architecture background
• Review and maintain System Security Plans (SSPs)
• Manage Plans of Actions and Milestones (POA&Ms) for IL5 and IL6 environments
• Develop new, and mature existing information security and enterprise risk policies
• Initiate and lead ongoing information security maturity assessment processes and training, using industry accepted frameworks and implement into the overall cyber security posture
• Conduct internal audits to ensure unwavering adherence to DoD compliance standards
• Collaborate with software engineers to fortify software and resolve vulnerabilities

• This position will be open until it is successfully filled