JOB REQUIREMENTS

• Expertise in reviewing FedRAMP Security documentation for completion, gaps, vulnerabilities, and identifying remediations that may be required.
• Expertise in developing Plans of Actions and Milestones (POA&M) for cloud services.
• Expertise in developing repeatable templates to leverage to answer hybrid and customer responsible security controls and ensuring total team compliance in leveraging necessary templates and tools.
• Expertise in training and managing a team of security professionals to execute against a significant volume of work in progress leveraging agile best practices.
• Expertise in supporting audit findings, remediation activities, and documentation gaps as well as train others against best practices to achieve maximum ATO duration.
• Shall have a minimum of two industry recognized certificates. CISSP preferred. Other acceptable certificates include Security+, Certified Information Security Manager (CISM), GIAC Security Essentials Certification (GSEC), CCSK, Certified in Governance, Risk and Compliance (CGRC), (formerly CAP)).
• Shall have a minimum of five years’ experience with, and depth of understanding of, Platform Security requirements and experience with NIST security requirements on large scale deployments.
• Shall possess a current Certified Information Systems Security Professional (CISSP) or Certified Information Security Manager (CISM), or achieve certification within 180 days of contract award. No substitutions will be accepted.
• Shall have a minimum of five years of experience with the following:
• 
  
  
  
• Ability to complete all cloud security actions required to accomplish Risk Management Framework (RMF) workflows including but not limited to tasks associated with the ATO and security/privacy documentation.

• 
  
  
  
• Expertise to define requirements for use case onboarding of SaaS and PaaS solutions following an ATO.

• Competent to manage multiple projects through the entire RMF lifecycle including decommissioning after product sunset occurs.
• Expertise in developing repeatable templates to leverage to answer hybrid and customer responsible security controls and ensuring total team compliance in leveraging necessary templates and tools.
• Expertise in training and managing a team of security professionals to execute against a significant volume of work in progress leveraging agile best practices.
• Responsible to support audit findings, remediation activities, and documentation gaps as well as train others against best practices to achieve maximum ATO duration.
• Minimum of three years of hands-on experience managing performance and team standards including collecting input from customers and adjusting expectations as needed.

EDUCATION AND EXPERIENCE

• Bachelor’s degree in computer science, Information Technology, or a related field. (Master’s degree preferred).
• 10+ years of experience in technical project management, preferably in the technology or IT sector.
• Strong knowledge of project management tools and methodologies such as Agile and Scrum.
• Technical knowledge in software development, systems engineering, or infrastructure management.
• Ability to plan and execute in a remote-first culture.
  Transitioning military and/or Veterans with IT/IS, finance, and/or healthcare systems specialties are invited to apply. Sprezzatura is an equal opportunity employer and offers benefits including healthcare and paid vacation time.

COMPANY DESCRIPTION

Sprezzatura (www.sprezzmc.com) is a Washington, DC-area Service-Disabled Veteran-Owned Small Business (SDVOSB) that enables client success by supplying insight and leadership at the intersection of people, processes, and technology

• Project Leadership: Plan, execute, and oversee technical projects, ensuring milestones are met and deliverables align with strategic goals.
• Technical Coordination: Work closely with engineering, IT, and development teams to understand technical requirements and resolve challenges.
• Sustain and modernize cloud based data analytics platform
• Implement advanced analytics including AI/ML and NLP
• Oversee Platform Architecture and integration
• Budget Management: Monitor project budgets and optimize resource allocation to achieve financial targets
• Stakeholder Communication: Serve as the primary liaison between technical teams, clients, and senior leadership, providing regular updates and progress reports.
• Risk Mitigation: Identify risks early and implement mitigation strategies to safeguard project success.
• Process Improvement: Apply best practices and agile methodologies to enhance project workflows and efficiency.