IT Project Manager / Security / ATO Specialist
Heitech Services
yesterday
Role details
Contract type
Permanent contract Employment type
Full-time (> 32 hours) Working hours
Regular working hours Languages
EnglishJob location
Remote
Tech stack
Software System Penetration Testing
Issue Tracking Systems
Software Vulnerability Management
Data Processing
Data Management
Job description
The IT Project Manager / Security / ATO Specialist supports project management and security/privacy activities for the reporting portal and related systems. This role coordinates ATO support, security documentation, privacy documentation, continuous monitoring, vulnerability remediation, and compliance with HHS, ACL, FISMA, NIST, FedRAMP, records management, accessibility, and cybersecurity requirements., * Coordinate project planning, security/privacy activities, status reporting, technical documentation, risk/issue tracking, and stakeholder communication.
- Prepare and maintain ATO-related artifacts such as SSPs, PTAs, PIAs, POA&Ms, contingency plans, continuous monitoring materials, and other required documentation.
- Support security assessments, penetration testing, authorization reviews, vulnerability tracking, and remediation within Government-established timelines.
- Coordinate with ACL technical staff, COR, system owners, and development personnel on system authorization, operations, maintenance, and compliance activities.
- Ensure personnel and project activities align with HHS/ACL security, privacy, records management, AI-use approval, incident reporting, and data handling requirements.
Requirements
- Experience supporting Federal system security authorization, ATO, FISMA, NIST, FedRAMP, privacy, and continuous monitoring activities.
- Experience preparing or maintaining SSPs, PTAs, PIAs, POA&Ms, contingency plans, security assessment materials, and related security artifacts.
- Experience coordinating technical projects involving secure Federal applications, cloud-hosted systems, reporting portals, or data management systems.
- Knowledge of incident reporting, data protection, access control, vulnerability remediation, and Government security/privacy compliance requirements.
- Ability to coordinate across project management, development, security, privacy, accessibility, operations, and Government stakeholder teams.
About the company
HeiTech Services may utilize technology-assisted tools, including artificial intelligence, to support the review of application materials. These tools are used to enhance efficiency; however, all hiring decisions are made by human reviewers in accordance with federal hiring guidelines.