ID4 Consultancy
Website:
id4consultancy.com
Company:
https://www.linkedin.com/company/id4consultancy
Seniority: Mid-Senior level
Industries: IT Services and IT Consulting
Job details:
Technical Project Manager (Security & Compliance)
Education:
Bachelor’s / Master’s degree in Computer science and Engineering / Computer Applications / Information Technology OR equivalent.
Certification: CISA / ISACA, PMP / PMI-ACP is mandatory.
Brief description of Role:
Looking for a candidate to modernize the vulnerability management program in-compliance with the FedRAMP 2026 Vulnerability Detection & Response (VDR) and Vulnerability Evaluation & Reporting (VER), which become mandatory on Dec 7, 2026 under CISA BOD 26-04. This is a high-visibility, deadline-driven program touching security engineering, DevOps, GRC, and executive stakeholders.
The Technical Project Manager serves as the connective tissue across all workstreams — an overlay resource who keeps four specialized engineers, internal platform teams, and business stakeholders aligned and moving toward a fixed regulatory deadline.
Key responsibilities:
❖ Own day-to-day program management for a ~16-week implementation with a fixed, non-negotiable compliance cutover date
❖ Serve as the primary liaison between the implementation team, internal security/platform/DevOps teams, and business stakeholders; run weekly steering sessions and executive readouts
❖ Build and maintain the integrated project plan across two parallel workstreams (platform/integration build and evaluation/reporting/controls), tracking dependencies, milestones, and the critical path to the deadline
❖ Track SLAs, risks, and blockers; escalate early and drive resolution across indirect reporting teams.
❖ Coordinate access, environments, change windows, and internal approvals so engineers stay unblocked.
❖ Manage scope against the ~22 VDR/VER requirements; maintain a control-to-requirement traceability view.
❖ Coordinate the parallel-run and cutover from the legacy scanning toolchain to the new consolidated platform, including training and handoff to internal teams.
❖ Prepare status reporting suitable for both engineering audiences and executive/audit audiences.
Mandatory Skills:
❖ Minimum 6+ years of technical project/program management experience delivering infrastructure, security, or platform engineering projects
❖ Demonstrated success delivering projects with hard external deadlines (regulatory, contractual, or launch-driven)
❖ Ability to work fluently with engineers - comfortable discussing CI/CD pipelines, API integrations, cloud environments and scanning tools at a working level
❖ Strong stakeholder management: experience aligning security, engineering, and business leadership with competing priorities
❖ Excellent risk management; a track record of surfacing problems weeks before they become schedule threats
❖ Direct experience with FedRAMP programs (ATO processes, 3PAO assessments, continuous monitoring, POA&M management) or other federal compliance frameworks (FISMA, CMMC, StateRAMP)
❖ Prior delivery of security tooling implementations (vulnerability management, SIEM, CNAPP, ASPM/aggregation platforms)
❖ Familiarity with the 2026 FedRAMP VDR / VER rule changes and CISA BOD 26-04
❖ Experience running hybrid onshore/offshore delivery teams
Soft Skills:
• Excellent problem-solving skills, with a keen attention to detail.
• Effective communication skills – written, spoken, listening and presentation.
• Great Team player and experience working with global teams and global organizations.
• Genuine interest in learning and knowledge sharing
• Strong collaboration and communication skills, with experience working in cross-functional teams.
Click on Apply to know more.