Cybersecurity Project Manager

About the Role

The Greentree Group is seeking an experienced Cybersecurity Project Manager to lead a complex cybersecurity assessment program supporting a public sector client in Austin, TX. This role involves planning, managing, and overseeing cybersecurity assessment activities in accordance with CMS security and privacy requirements, including the ARC-AMPE framework and NIST standards.

Responsibilities

• Lead the planning, execution, and delivery of cybersecurity assessment projects, ensuring adherence to contractual requirements, schedules, budgets, and quality standards.
• Manage multidisciplinary assessment teams evaluating administrative, technical, and operational security controls.
• Coordinate security assessment activities under CMS ARC-AMPE, NIST SP 800-53, and other applicable federal and state cybersecurity requirements.
• Develop and maintain project management artifacts, including schedules, risk registers, status reports, action item logs, and executive briefings.
• Facilitate communication between client leadership, technical stakeholders, assessors, and project participants.
• Oversee the development and delivery of assessment documentation, such as Security Assessment Plans (SAPs), Security Assessment Reports (SARs), and Plan of Action and Milestones (POA&Ms).
• Identify and mitigate project risks, issues, dependencies, and resource constraints.
• Present technical findings, compliance gaps, and risk-based recommendations to technical and executive audiences.
• Support continuous improvement of assessment methodologies, project execution processes, and client outcomes.
• Ensure project teams comply with cybersecurity, privacy, and quality assurance requirements.
• Serve as a trusted advisor to the client, helping leadership understand and prioritize cybersecurity risks.

Qualifications

• Strong verbal, written, and presentation skills.
• Excellent interpersonal skills with the ability to work effectively with diverse stakeholders.
• Knowledge of cybersecurity industry standards, frameworks, and best practices.
• 5+ years of experience supporting Security Control Assessments (SCAs), security authorizations, or related cybersecurity compliance activities.
• Experience conducting or overseeing technical security audits and assessments for large, complex systems.
• 5+ years of project management experience leading cybersecurity, compliance, or assessment engagements.
• Experience developing and managing project schedules, budgets, staffing plans, and client deliverables.
• Working knowledge of NIST SP 800-series publications, including NIST SP 800-53 security controls.
• Ability to communicate IT and cybersecurity risks to executive leadership.
• Ability to work independently and lead multidisciplinary teams in a dynamic environment.
• Bachelor's degree from an accredited college or university.
• U.S. Citizenship required.

Desired Qualifications

• Experience leading CMS, HHS, or other federal cybersecurity assessment and authorization projects.
• Experience supporting Authority to Connect (ATC), Authority to Operate (ATO), or continuous monitoring activities.
• Familiarity with CMS ARC-AMPE and legacy MARS-E 2.2 frameworks.
• Experience managing distributed assessment teams, subcontractors, and quality review activities.
• PMP certification.
• CISSP, CISM, CISA, or equivalent cybersecurity certification.
• Previous experience supporting government healthcare, Medicaid, Medicare, or health insurance exchange systems.

Pay

Salary Range: $125,000 – $145,000. Bonuses include employee referral and performance-based bonuses.

Benefits

• 100% paid core benefits: Employee Medical Premium (HDHP), Basic Life Insurance, AD&D, Short-Term Disability, Long-Term Disability, Health Reimbursement Account (HRA), 401(k) Match, Job-Related Certifications, and Training Programs.
• Elected benefits: Medical, Dental, Vision, HSA, FSA, Voluntary Term Life, 401(k) (Roth and Pretax available).
• Time Off: Generous PTO, flexible schedules, 11 paid holidays, and paid parental leave.
• Paid Training and Development: Job-related certifications, training programs, and tuition reimbursement.

Schedule

Flexible/hybrid working schedules.

Location: Candidates must be residents of and authorized to work in AZ, CO, DC, FL, GA, KY, MD, MI, NC, OH, OR, PA, SD, TX, or VA.