Program Manager, Cybersecurity & Privacy (O-5 Billet) Non-Supervisory

Summary

IHSC seeks a USPHS O-5 Cybersecurity & Privacy Program Manager to lead a portfolio of health IT cybersecurity and privacy compliance work. The incumbent will coordinate Risk Management Framework and privacy activities, acquisition requirements, schedules, and stakeholders across IHSC. This non-supervisory position requires strong program management, communication, and Federal compliance coordination skills. This position is only open to USPHS officers and Call to Active Duty (CAD) candidates

Duties

DUTIES AND RESPONSIBILITIES: Leads an assigned portfolio of cybersecurity and privacy compliance projects, systems, acquisitions, and workstreams. Serves as the primary point of accountability for coordination, progress monitoring, and issue identification within the assigned portfolio. Develops and maintains milestone schedules for assigned projects and workstreams. Tracks project status, dependencies, constraints, deliverables, and schedule risks; identifies potential slippage early enough to support intervention and resolution. Supports authorization activities for assigned systems, including coordination and tracking of Risk Management Framework (RMF) documentation, security artifacts, plans of action and milestones, evidence, and related authorization packages. Coordinates with System Owners, Authorizing Officials, Federal Information System Security Officers, Office of the Chief Information Officer cybersecurity authorities, privacy officials, acquisition personnel, contracting personnel, and contractor support staff to ensure required input is obtained, considered, documented, and acted upon. Identifies cybersecurity and privacy implications early in project and acquisition planning. Coordinates privacy reviews and tracks formal privacy determinations, assessments, and resulting actions from the appropriate privacy officials. Works with the Acquisition Planning Office and other stakeholders to identify and incorporate cybersecurity and privacy requirements into acquisition planning, requirements documentation, statements of work, performance work statements, and related acquisition artifacts before referral to contracting. Ensures cybersecurity and privacy requirements identified during planning are carried forward through contract performance, oversight, system implementation, and lifecycle management. Coordinates contractor-provided cybersecurity support through appropriate Government channels. Preserves Government decision-making authority and does not issue formal direction to contractor personnel unless separately authorized. Identifies, assesses, documents, and escalates cybersecurity, privacy, compliance, and schedule risks within the assigned portfolio. Provides recommendations and clearly explains potential programmatic, cost, schedule, operational, and mission impacts. Coordinates with the Portfolio Management Office to ensure assigned milestones, dependencies, constraints, risks, and resource considerations are accurately reflected in enterprise schedules, planning activities, and portfolio reporting. Maintains complete, retrievable, accurate, and protected compliance records that are traceable to the decisions, determinations, and actions they support. Develops status reports, briefings, dashboards, correspondence, and other written products for the CCO Supervisory Lead and relevant stakeholders. Communicates technical and compliance issues in clear, concise, programmatically relevant terms. Participates in meetings, working groups, acquisition planning sessions, and program reviews as a cybersecurity and privacy compliance coordination representative for assigned work. Remains flexible and able to adapt to changing priorities, schedules, work requirements, and mission needs. Performs other duties as assigned. Qualifications

PHYSICAL DEMANDS: Sitting and/or standing for extended periods of time, generally six to eight hours. Performing repeated bending motions as needed. Average manual dexterity for computer operation and handling routine office equipment. Telephone and virtual meeting participation for extended periods. Occasional travel may be required in support of CAMS, HITU, IHSC, and unit mission requirements.

Education

REQUIRED KNOWLEDGE, SKILLS, AND ABILITIES: Qualifying degree from the U.S. Public Health Service officer's category and progressively responsible professional experience relevant to the officer's category. At least two years of meaningful experience in one or more of the following areas: Cybersecurity, information security, information assurance, or Federal information technology governance; Privacy, information governance, compliance, or risk management; Risk Management Framework, authorization support, or continuous monitoring; Program management, project management, contractor management, health information technology, or healthcare technology. Ability to manage assigned projects and portfolios where technical work is performed by specialists whom the incumbent does not supervise. Working knowledge of Federal cybersecurity and privacy compliance practices, including authorization activities, RMF concepts, continuous monitoring, privacy reviews, and compliance documentation, sufficient to manage work and recognize risk. Ability to understand technical discussions, ask informed questions, analyze information, and translate technical findings into schedule, cost, mission, operational, and programmatic impacts. Knowledge of the Federal acquisition lifecycle sufficient to ensure cybersecurity and privacy requirements are incorporated into acquisitions during planning and remain addressed through contract performance and oversight. Ability to manage multiple workstreams concurrently at varying stages of planning, acquisition, implementation, authorization, and operations while maintaining accurate milestones, dependencies, status information, and records. Ability to coordinate contractor-provided technical support while preserving Government decision-making authority and complying with applicable acquisition and contracting requirements. Ability to exercise sound judgment, initiative, independence, and follow-through when managing sensitive, complex, and multidisciplinary programmatic issues. Ability to identify, assess, document, and communicate risks and provide actionable recommendations to supervisors and stakeholders. Ability to communicate clearly, concisely, and professionally in writing and orally, including through status reports, briefings, meeting facilitation, and formal correspondence. Knowledge and skill in Microsoft Office applications, including Word, Excel, PowerPoint, Outlook, Teams, SharePoint, and project-tracking tools. Ability to establish and maintain effective working relationships with Federal personnel, contractors, technical specialists, acquisition personnel, privacy officials, and executive stakeholders. Relevant coursework, professional training, or certifications may strengthen an applicant's preparation. Examples include Security+, Project Management Professional (PMP), Certified in Governance, Risk and Compliance (CGRC), privacy credentials, Federal Acquisition Certification for Contracting Officer's Representatives (FAC-COR), or comparable credentials. Such credentials are valuable but not independently required. Must be able to attain and maintain the background investigation and suitability determination required for the position. Must maintain professional licensure or certification applicable to the officer's discipline, if applicable. Must be able to travel in support of unit mission requirements. How You Will Be Evaluated

We will review your resume and supporting documentation to ensure you meet the minimum qualification requirements. You may be selected for an interview at the hiring authority's discretion. You will be notified of selection or non-selection. Other Information

This position is located within the Department of Homeland Security (DHS), Immigration and Customs Enforcement (ICE), Enforcement and Removal Operations (ERO), ICE Health Service Corps (IHSC), and the Office of Deputy Assistant Director (DAD) of Administration, Health Information and Technology Unit (HITU). IHSC has a multi-sector, multidisciplinary workforce of more than 1600 employees, including U.S. Public Health Service (PHS) commissioned officers, federal civil servants, and contract staff. The IHSC provides on-site direct patient care to ICE detainees at 17 detention facilities throughout the country and manages the provision of off-site medical care for detainees housed in approximately 128 additional Intergovernmental Service Agreement (IGSA) facilities. The ICE detainee population is approximately 45,000 detainees daily, with an average length of stay of approximately 30 days, and over 400,000 detainees annually. The IHSC also provides medical support during ICE enforcement operations in the air, on the ground, and at sea. The Health Information and Technology Unit (HITU) is responsible for managing the acquisition lifecycle of IHSC IT contracts in partnership with the Office of Acquisition Management and the Office of the Chief Information Officer. The IHSC IT Contracts and Acquisition Management Section (CAMS) provides dedicated ownership of pre-award acquisition planning, post-award contract governance, and cybersecurity and privacy compliance coordination across the acquisition and contract lifecycle for medical assets. In addition, working with partners across ICE, CAMS works to ensure all equipment meets security requirements. SUPERVISORY CONTROLS: The Cybersecurity & Privacy Program Manager works under the general supervision of the Cybersecurity Compliance Office Supervisory Lead. The incumbent plans, organizes, and carries out assigned portfolio responsibilities; determines the sequence of work; develops methods for tracking and coordinating compliance activities; and seeks supervisory guidance on matters involving policy, resource decisions, significant risk, conflicts, or issues requiring escalation outside the office. Assignments may be long-term, recurring, or broadly defined. Work is reviewed for alignment with office standards, feasibility, compatibility with other work, completeness of documentation, effectiveness in meeting requirements, and achievement of expected results. The incumbent manages the assigned portfolio and provides recommendations but does not self-assign work or escalate matters outside the office without coordination with the CCO Supervisory Lead.