Responsibilities
- Act as the main liaison between agency leadership and key stakeholders.
- Manage full lifecycle program performance across all security operations center functions, including incident response, forensic analysis, log management, and coordination.
- Maintain adherence to all BPA Call terms, service level agreements, and mandatory reporting standards.
- Lead governance activities such as performance tracking, risk reduction, and quality control.
- Supervise workforce planning to ensure sufficient staffing at Tier 1, 2, and 3 levels, including surge capacity.
- Lead initiatives to enhance capabilities, including advancing logging maturity per M-21-31, improving SIEM efficiency, and implementing automation and orchestration.
- Produce regular executive reports—weekly, monthly, and quarterly—with data-driven insights and recommendations.
- Coordinate the escalation process during significant cyber incidents.
- Guarantee continuous operational availability, including coverage during non-business hours and on-call shifts.
- Exercise full managerial authority over contractor teams and their operational execution.
Other
Ensure 24/7 operational readiness, including after-hours and on-call coverage
