Program Manager, Cybersecurity & Privacy (O-5 Billet) Non-Supervisory

Summary

IHSC seeks a USPHS O-5 Cybersecurity & Privacy Program Manager to lead a portfolio of health IT cybersecurity and privacy compliance work. The incumbent will coordinate Risk Management Framework and privacy activities, acquisition requirements, schedules, and stakeholders across IHSC. This non-supervisory position requires strong program management, communication, and Federal compliance coordination skills. This position is only open to USPHS officers and Call to Active Duty (CAD) candidates

Duties

DUTIES AND RESPONSIBILITIES: Leads an assigned portfolio of cybersecurity and privacy compliance projects, systems, acquisitions, and workstreams. Serves as the primary point of accountability for coordination, progress monitoring, and issue identification within the assigned portfolio. Develops and maintains milestone schedules for assigned projects and workstreams. Tracks project status, dependencies, constraints, deliverables, and schedule risks; identifies potential slippage early enough to support intervention and resolution. Supports authorization activities for assigned systems, including coordination and tracking of Risk Management Framework (RMF) documentation, security artifacts, plans of action and milestones, evidence, and related authorization packages. Coordinates with System Owners, Authorizing Officials, Federal Information System Security Officers, Office of the Chief Information Officer cybersecurity authorities, privacy officials, acquisition personnel, contracting personnel, and contractor support staff to ensure required input is obtained, considered, documented, and acted upon. Identifies cybersecurity and privacy implications early in project and acquisition planning. Coordinates privacy reviews and tracks formal privacy determinations, assessments, and resulting actions from the appropriate privacy officials. Works with the Acquisition Planning Office and other stakeholders to identify and incorporate cybersecurity and privacy requirements into acquisition planning, requirements documentation, statements of work, performance work statements, and related acquisition artifacts before referral to contracting. Ensures cybersecurity and privacy requirements identified during planning are carried forward through contract performance, oversight, system implementation, and lifecycle management. Coordinates contractor-provided cybersecurity support through appropriate Government channels. Preserves Government decision-making authority and does not issue formal direction to contractor personnel unless separately authorized. Identifies, assesses, documents, and escalates cybersecurity, privacy, compliance, and schedule risks within the assigned portfolio. Provides recommendations and clearly explains potential programmatic, cost, schedule, operational, and mission impacts. Coordinates with the Portfolio Management Office to ensure assigned milestones, dependencies, constraints, risks, and resource considerations are accurately reflected in enterprise schedules, planning activities, and portfolio reporting. Maintains complete, retrievable, accurate, and protected compliance records that are traceable to the decisions, determinations, and actions they support. Develops status reports, briefings, dashboards, correspondence, and other written products for the CCO Supervisory Lead and relevant stakeholders. Communicates technical and compliance issues in clear, concise, programmatically relevant terms. Participates in meetings, working groups, acquisition planning sessions, and program reviews as a cybersecurity and privacy compliance coordination representative for assigned work. Remains flexible and able to adapt to changing priorities, schedules, work requirements, and mission needs. Performs other duties as assigned.

Qualifications

PHYSICAL DEMANDS: Sitting and/or standing for extended periods of time, generally six to eight hours. Performing repeated bending motions as needed. Average manual dexterity for computer operation and handling routine office equipment. Telephone and virtual meeting participation for extended periods. Occasional travel may be required in support of CAMS, HITU, IHSC, and unit mission requirements.

Education

REQUIRED KNOWLEDGE, SKILLS, AND ABILITIES: Qualifying degree from the U.S. Public Health Service officer's category and progressively responsible professional experience relevant to the officer's category. At least two years of meaningful experience in one or more of the following areas: Cybersecurity, information security, information assurance, or Federal information technology governance; Privacy, information governance, compliance, or risk management; Risk Management Framework, authorization support, or continuous monitoring; Program management, project management, contractor management, health information technology, or healthcare technology. Ability to manage assigned projects and portfolios where technical work is performed by specialists whom the incumbent does not supervise. Working knowledge of Federal cybersecurity and privacy compliance practices, including authorization activities, RMF concepts, continuous monitoring, privacy reviews, and compliance documentation, sufficient to manage work and recognize risk. Ability to understand technical discussions, ask informed questions, analyze information, and translate technical findings into schedule, cost, mission, operational, and programmatic impacts. Knowledge of the Federal acquisition lifecycle sufficient to ensure cybersecurity and privacy requirements are incorporated into acquisitions during planning and remain addressed through contract performance and oversight. Ability to manage multiple workstreams concurrently at varying stages of planning, acquisition, implementation, authorization, and operations while maintaining accurate milestones, dependencies, status information, and records. Ability to coordinate contractor-provided technical support while preserving Government decision-making authority and complying with applicable acquisition and contracting requirements. Ability to exercise sound judgment, initiative, independence, and follow-through when managing sensitive, complex, and multidisciplinary programmatic issues. Ability to identify, assess, document, and communicate risks and provide actionable recommendations to supervisors and stakeholders. Ability to communicate clearly, concisely, and professionally in writing and orally, including through status reports, briefings, meeting facilitation, and formal correspondence. Knowledge and skill in Microsoft Office applications, including Word, Excel, PowerPoint, Outlook, Teams, SharePoint, and project-tracking tools. Ability to establish and maintain effective working relationships with Federal personnel, contractors, technical specialists, acquisition personnel, privacy officials, and executive stakeholders. Relevant coursework, professional training, or certifications may strengthen an applicant's preparation. Examples include Security+, Project Management Professional (PMP), Certified in Governance, Risk and Compliance (CGRC), privacy credentials, Federal Acquisition Certification for Contracting Officer's Representatives (FAC-COR), or comparable credentials. Such credentials are valuable but not independently required. Must be able to attain and maintain the background investigation and suitability determination required for the position. Must maintain professional licensure or certification applicable to the officer's discipline, if applicable. Must be able to travel in support of unit mission requirements.