Security & Compliance Project Manager

Role: Security & Compliance Senior Project Manager Location: 100 Hancock Street, Quincy, Massachusetts 02171 (Hybrid)Jon type: Contract

List of Duties and Responsibilities:Responsible for overall coordination, facilitation, elicitation, and aggregation of status reporting and status of health of the project.Develop and Manage the Information Security Stakeholder contact list to the different Agencies and Programs.Review project plans: to include estimation of time, equipment, and staff resource requirements by business each business area under review plan for the proposed business areas, their systems and data classification. Ensuring all projects and milestones are delivered on time and within the stipulated scope and budget.Lead the initiation, planning, and outcomes in collaboration with delivery teams.Lead the tracking and follow-up of risks, issues, and constraints, escalate where appropriate.Coordinate with internal and external parties for the execution of required activities according to project defined requirements.Manage relationships between internal teams, outside subject matter experts, and stakeholders. Manage, influence, and guide business and technical leads in the priorities that lead to the successful completion of requirements and policies. Lead activities to ensure the review, acceptance, approval and submittal of vendor invoices.Help lead and schedule kick-off meeting with the EOHHS business areas to establish a mutual understanding of the engagement objectives, timeline, roles, and deliverables.Review the top-down (process based) approach to identify sensitive data across the organization. Including monitoring and helping with the Data discovery surveys to be distributed to the key business process owners and stewards.Help lead the Subject Matter Experts to classify data assets through standardized questionnaires, distributing the questionnaires to the right stakeholders, aggregating responses, and using the responses to prioritize the most important data assets in each agency. Facilitate workshops for the Compliance Vendor with the many business teams to introduce stakeholders for various business processes with the assessment questionnaire. Liaison with the Compliance vendor as one of the key Points of Contact (POC), to provide help to the business areas for them to respond the vendor’s questionnaires in a timely fashion.Ensure vendor and internal teams understand the Executive Office of Technology Services and Security (EOTSS) Enterprise Security Policies and Standards IS.004 Asset Management standard, as well as further classification criteria to the level of specificity required by EOHHS.Manage the Project Repository (SharePoint, Jira or some other method) to ensure all artifacts are collected, version controlled, and available upon request (examples: Excel files, Word, Vision diagrams, Plan of Actions, Reports, other Project Assets, etc.).

Preferred Knowledge, Skills, and Abilities:Minimum of 5 (five) years of experience in technical project management.Strong operational and project management skills, including PMI and Agile project management experience in all software development lifecycle methodologies.Able to foster a collaborative work environment and demonstrate excellent leadership skills.Possess prior experience in Security and/or Compliance with some familiarity with NIST Risk Management, FIPS 199, 200, NIST 800-53 Security and Privacy Controls, NIST 800-60 Mapping Types of Information and Information Systems to Security Categories.Possess strong organizational, presentation and customer service skills.Possess excellent problem-solving and team collaboration skills as required in project environments.Proven track record in driving complex projects of managing or maintaining businesses applications to newer cloud platforms.Experience in ethically maintaining the confidentiality of sensitive information or discussions.Proficiency with Microsoft Office, MS Project and MS Visio and collaboration tools.Education/Certifications:Bachelor’s Degree in Computer Science, Computer Information Systems, Information Management, or equivalent work experience.Project Management Certification (PMP), (PMI), or Agile Project Management Certification is preferred, but not required.