The Information Systems Security Project Manager will supervise and provide senior level technical expertise, training, and mentoring to Secruity Control Assesor and Analyst teams, managing compliance for financial application systems. The contract work just commenced and is for 4 years. Preferred experience inludes:Expert level knowledge of and experience with FISMA-related activities to include system security plans, contingency plans, incident response plans, configuration management plans, security control requirements and assessments, Plan of Action and Milestones (POA&M), and training requirements.Expert level knowledge of and experience in applying NIST SP 800-37 Risk Management principles, interpreting requirements, and developing implementation guidance.Expert level knowledge of and experience implementing requirements and guidance as indicated in the documents identified as follows:NIST SP 800- 18, Guide for Developing Security Plans for Federal Information Systems NIST SP 800-30, Guide for Conducting Risk AssessmentsNIST SP 800-34, Contingency Planning Guide for Federal Information SystemsNIST SP 800-37, Guide for Applying the Risk Management Framework to Federal Information Systems: A Security Life Cycle ApproachNIST SP 800-39,Managing Information Security Risk: Organization, Mission, and Information System ViewNIST SP 800-53A, Assessing Security and Privacy Controls in Federal Information Systems and Organizations: Building Effective Assessment PlansNIST SP 800-53, Security and Privacy Controls for Federal Information Systems and OrganizationsNIST SP 800-60, Guide for Mapping Types of Information and Information Systems to Security CategoriesNIST FIPS 199, Standards for Security Categorization of Federal Information and Information SystemsFedRAMP Security Assessment Framework, Security Controls and Agency Guide for FedRAMP Authorizations level knowledge and experience writing policies, procedures, guidance, standards and instructional materials.Ability to design, develop and implement FISMA compliant solutions that meet current and future business requirements and enhance and optimize the existing security architecture.Knowledge of and experience with Federal Privacy requirements to include Privacy Impact Assessments PIA and personally identifiable information (PII).A' CISSP or equivalent certification required