Asenium company
For one of my end customer we are looking for a Cybersecurity Project Manager for a CMMC project.
Location: France(100% remote)
Duration: 6 months renewable
Description:
The CMMC audit preparation will be based on 3 main streams: The site assessment for the requirements and controls on site (both by IT and business) with various angle of approaches permitting to satisfy several functions of sites (IT, GEC, GBU, site maintenance team, facility team)
The business application teams, for the concerned applications and systems The Separation Program, which rebuild systems and services and needs to validate that the target includes the CMMC requirements, integrates CMMC controls and are documented.
The work needed to prepare this audit and implement corrective actions are happening in a special period with a very high team's workload, limited capacity, evolving organization and sometimes missing knowledge.
The CMMC certification also coincides with other audits: TISAX, ITGC audit. Therefore, the CMMC task force must coordinate, share work, and look for reuse in other audits.
At the moment, the CMMC preparation is carried by a small team of experts, but needs framing, method and proper governance to secure its delivery.
The candidate will integrate and steer this existing team, and will be reporting to CISO.
To achieve this program, the candidate will interact not only with the CISO team but with the other business team, IT teams & other external entities involved in the CMMC remediation program especially with the TSA supplier contract.
In addition to this, there is a need to define the process / governance to maintain this certification, and how to deal with changes, ensure that CMMC requirements are regularly assessed and improved.
An internal audit will be required to verify this annually as well as a review of the System Security Plan.
Global program / project management Driving the program of CMMC certification : capacity to set up and propose a pragmatic program approach permitting the structure the CMMC remediation program
Managing the existing team for CMMC Certification Organizing the adequate visibility, reporting and process of steering
Organizing and structuring the integration of this program with the other audits outcome remediation
Good experience with working with worldwide teams
Minimum of 10 years experience in Cyber Security program management.
Experience of IT governance / Project management Analytical/problem-solving mindset.
