Project Manager Cybersecurity Plan Review

We need to output HTML fragment with sections only if content present. Use

for headings: About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. We need to decide which sections have content. From posting: - About the role: we have introductory paragraph about company, mission, etc. Could be "About the role". We'll include that as prose. - Responsibilities: list of key responsibilities. - Requirements: maybe "Required Qualifications". Could be "Requirements" or "Qualifications". We'll have both "Requirements" and "Qualifications"? The instruction: use headings for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule). So we can have separate sections for Requirements and Qualifications. But we need to avoid thin sections. We have Required Qualifications and Preferred Qualifications. Could combine into Qualifications section with subpoints? But we must follow headings list; we can have Qualifications heading and include both required and preferred as lists. - Skills: Technical Skills list. - Benefits: benefits described: health, dental, vision, life insurance, 401(k) with company matching, paid time off and holidays, employee referral program, educational assistance. Also mention additional details on website. - Pay: not mentioned. So we should NOT include Pay section. - Schedule: not mentioned (remote, full-time). Not explicit schedule. Could infer full-time but not stated as schedule details. The instruction: never create Pay/Schedule/Benefits sections unless posting actually states them. Benefits is stated, so include Benefits. Schedule not explicitly stated (though remote full-time). Not given as schedule details like hours. So omit Schedule. - Also we have location, security clearance, citizenship, background investigation. That could be part of About the role or Requirements? Might be better to include in About the role or maybe a separate "Requirements"? But we have Required Qualifications separate. The citizenship and background investigation are requirements. Could place under Requirements. We need to preserve all substantive information. So we need to include location, citizenship, background investigation, security clearance none required, etc. We must not repeat job title as heading. No Job ID. We must remove boilerplate: EEO, accommodation request, etc. Also remove "OneZero Solutions, LLC is an Equal Opportunity employer..." and accommodation request line. Also remove "Job Posted by ApplicantPro". Also remove navigation/cookie etc (none present). Also remove "Additional details are available on our website: https://..." maybe keep as part of Benefits? It's a link for benefits details. Could keep as part of Benefits paragraph. We need to output only HTML fragment. Let's structure:

About the role

We are an employee-centric company that truly values our team members and the contributions they make to our customers and the missions they support. We pride ourselves on being forward-leaning thinkers and on building teams that are, and continue to be, technically proficient across a broad range of cyber mission areas. OneZero full-time employees receive a highly competitive benefits package, including health, dental, vision, and life insurance, a 401(k) with company matching, paid time off and holidays, an employee referral program, and educational assistance. Additional details are available on our website: https://www.onezerollc.com/careers/ Position Title: Project Cybersecurity Plan Review Location: Remote (United States). Security Clearance: No security clearance is required. This work is performed at the Controlled Unclassified Information (CUI) level. U.S. citizenship is required. All personnel must undergo and successfully pass, at minimum, a Tier 1 background investigation (or equivalent) and be favorably adjudicated.

But we might want to separate location etc. However it's okay. Then Responsibilities:

Responsibilities

• Manage the Plan Reviewer team, including assignment, prioritization, and workload balancing; process submittals in the order received unless reprioritized by the COR.
• Serve as the lead for resolving and providing the final recommendation on complex or novel cybersecurity plans.
• Ensure Stage One cursory reviews are completed within ten (10) business days of assignment and that incomplete submittals are identified with draft signature-ready correspondence stating each deficiency, its regulatory basis, and resubmission instructions.
• Ensure Stage Two detailed technical reviews and quality control are completed within forty-five (45) calendar days of receipt of a complete submittal.
• Ensure reviewers recommend a finding of Satisfactory, Unsatisfactory, or Not Applicable for each regulatory checklist element in each plan and assessment.
• Perform quality control on review products before submission to the Government, confirming findings are clearly stated, technically supportable, internally consistent, and traceable to the applicable requirement.
• Oversee recording and maintenance of Alternative Security Program certifications, maintain the updated list of regulated entities covered by an ASP, and ensure ASP acknowledgment letters are drafted for USCG review.
• Ensure Stage Three packages are provided to the USCG representative with the plan and annotated checklist, and that signature-ready correspondence is prepared for USCG signature and processed within one business day of signature.
• Ensure MISLE, SharePoint, and ServiceNow records are updated before the close of the following business day for every status change.
• Provide workload and aging inputs to the weekly and monthly status reports.
• Escalate OT and ICS technical questions to the Senior SME, Equivalency, and refer policy-related inquiries to the designated USCG representative.
• Identify and report to the Project Manager any submitter that may present an organizational conflict of interest.

Then Requirements: maybe combine citizenship, background investigation, etc. But we also have Required Qualifications list. Could put those under Requirements. Let's do:

Requirements

• One (1) year of experience in a team leadership or project management role.
• A detailed understanding of 33 CFR Subchapter H, specifically 33 CFR Part 101 Subpart F, and knowledge of maritime operational environments for both vessels and facilities.
• Proficiency in regulatory compliance with industry-standard cybersecurity frameworks such as NIST CSF.
• Three (3) years of experience demonstrating proficiency in maritime security or operations, or three (3) years of experience in cybersecurity policy or compliance.
• At least one cybersecurity certification satisfying the certification requirement for the DoD 8140 DCWF work role of Security Control Intermediate proficiency level (for example CISA, CGRC, or CISSP).
• Must disclose, for organizational conflict of interest screening, any current or prior engagement performed for MTSA-regulated vessel, facility, or Outer Continental Shelf facility owners or operators involving cybersecurity plan development, cybersecurity assessment, or related advisory services.
• U.S. citizenship is required.
• All personnel must undergo and successfully pass, at minimum, a Tier 1 background investigation (or equivalent) and be favorably adjudicated.

But note we already included citizenship and background investigation in About the role paragraph. To avoid duplication, we could keep them only in Requirements. The instruction: preserve ALL substantive information; do not invent or summarize away detail. Duplication is okay? It says remove duplicated lines. So we should avoid duplicating the same info. So we should not repeat citizenship and background investigation in both About and Requirements. Let's move them to Requirements only, and remove from About paragraph. Thus About paragraph will be more generic about company and benefits. Let's rewrite About paragraph:

We are an employee-centric company that truly values our team members and the contributions they make to our customers and the missions they support. We pride ourselves on being forward-leaning thinkers and on building teams that are, and continue to be, technically proficient across a broad range of cyber mission areas. OneZero full-time employees receive a highly competitive benefits package, including health, dental, vision, and life insurance, a 401(k) with company matching, paid time off and holidays, an employee referral program, and educational assistance. Additional details are available on our website: https://www.onezerollc.com/careers/ Position Title: Project Cybersecurity Plan Review Location: Remote (United States).

But we still have Position Title line; maybe we should not include that as it's redundant (the page already shows it). The instruction: do NOT repeat the job title as a heading (the page already shows it) and do NOT put Job ID / requisition numbers as headings — fold minor metadata into a short

or drop it. So we can include Position Title line in a short paragraph as metadata, but it's minor. Could drop it. Probably better to drop it to avoid redundancy. So we can omit Position Title line. Thus About paragraph: company description, benefits, location remote. Let's craft:

We are an employee-centric company that truly values our team members and the contributions they make to our customers and the missions they support. We pride ourselves on being forward-leaning thinkers and on building teams that are, and continue to be, technically proficient across a broad range of cyber mission areas. OneZero full-time employees receive a highly competitive benefits package, including health, dental, vision, and life insurance, a 401(k) with company matching, paid time off and holidays, an employee referral program, and educational assistance. Additional details are available on our website: https://www.onezerollc.com/careers/ Location: Remote (United States).

Now Responsibilities as above. Then Requirements as above (including citizenship, background investigation). Also we might include "Security Clearance: No security clearance is required." That's also a requirement. Could add to Requirements list. Add:

No security clearance is required.

Also "This work is performed at the Controlled Unclassified Information (CUI) level." Could be a requirement. Add:

Work is performed at the Controlled Unclassified Information (CUI) level.

Now Qualifications section: we have Preferred Qualifications. Could put under Qualifications heading.

Qualifications

• Certification satisfying the Security Control Assessor (612) requirement at the Advanced proficiency level.
• Prior U.S. Coast Guard, DHS, or MTSA regulatory experience.
• Experience as a Facility Security Officer, Vessel Security Officer, or Company Security Officer.
• Experience leading document review, assessment, or authorization package quality control teams.
• Familiarity with OT and ICS environments.

But we also have Education: Bachelor's degree in cybersecurity, information technology, maritime studies, or a related field preferred. Equivalent experience considered. That could be part of Qualifications as well. Add education bullet. Now Skills: Technical Skills list.

Skills

• Regulatory checklist-based review and quality control methods.
• NIST Cybersecurity Framework and NIST SP 800-series guidance.
• USCG MISLE, SharePoint, and ServiceNow, or comparable case management systems.
• Workload tracking and aging reporting.
• CUI and SSI handling in accordance with 49 CFR Part 1520 and DHS MD 11042.1.

Benefits: we already mentioned benefits in About paragraph, but we could also create a Benefits section to list them explicitly. However we already included benefits in About paragraph; but we could still create a Benefits section with list. The instruction: prefer a few substantive sections over many thin ones. Benefits is substantive; we could either keep in About or separate. Since we already have About with benefits, we could keep Benefits section separate but that would duplicate. Better to move benefits details to a Benefits section and keep About more generic. Let's restructure: About the role: company description, mission, location remote (no benefits). Benefits section