Vendor Project Manager – Cybersecurity / NIST Framework & Testing

Company: SMX Services & Consulting, Inc.
Project: Cybersecurity Technical Assistance for NIST Cybersecurity Framework & Testing
Customer: Executive Office of the Governor, State of Florida
Solicitation: EOG-RFQ-27-03 / RFQ1828251S
Period of Performance: September 7, 2026 – June 30, 2027
Location: Florida / Project-Specific
Employment: Contract / Project-Based
Pay Range: $77.74–$80.79 per hour

Citizenship: Must be a U.S. Citizen

Position Overview

SMX Services & Consulting, Inc. is seeking a Vendor Project Manager to support a cybersecurity technical-assistance engagement for the State of Florida Executive Office of the Governor.

The engagement supports enterprise-wide cybersecurity audit efforts conducted by state agency Offices of Inspector General (OIGs). Work includes coordination of cybersecurity assessments and testing aligned with the NIST Cybersecurity Framework, including ground-truth testing and authorized discretionary testing supporting the independent internal-audit process.

The Vendor Project Manager will provide project leadership, coordination, documentation oversight, schedule management, stakeholder communication, and quality control throughout the engagement.

Key Responsibilities

• Lead project startup, planning, coordination, execution, and closeout activities.

• Coordinate activities with the Office of the Chief Inspector General (OCIG), participating OIGs, state agencies, and the SMX technical team.

• Maintain the Master Project Plan and monitor project milestones, dependencies, schedules, risks, and deliverables.

• Coordinate access requirements necessary for authorized cybersecurity testing.

• Oversee preparation and delivery of required project documentation.

• Ensure cybersecurity testing activities remain within customer-authorized scope.

• Coordinate the development and review of testing strategies and detailed testing procedures.

• Monitor completion of testing, supporting evidence, analysis, findings, and recommendations.

• Support quality-assurance activities across project deliverables.

• Coordinate knowledge-transfer activities with OCIG and participating OIG personnel.

• Oversee required status reporting and project communications.

• Support preparation of lessons learned and project-closeout documentation.

• Review and certify the Agency Risk Understanding Memorandum as required by the project.

• Ensure project personnel comply with applicable confidentiality, information-security, and customer requirements.

Required Qualifications

• Must be a U.S. Citizen.

• Demonstrated project-management experience involving cybersecurity, information technology, security assessments, audits, or related technical services.

• Ability to manage multiple concurrent workstreams and stakeholders.

• Strong understanding of project planning, scheduling, risk management, issue management, and deliverable control.

• Ability to coordinate technical cybersecurity personnel and communicate technical matters to management and audit stakeholders.

• Strong written and verbal communication skills.

• Experience preparing professional project plans, reports, meeting documentation, risk documentation, and executive-level communications.

• Ability to manage sensitive cybersecurity information appropriately.

• Ability to work effectively with government stakeholders and independent audit organizations.

Preferred Qualifications

Experience in one or more of the following areas is highly desirable:

• NIST Cybersecurity Framework

• Cybersecurity assessments

• Vulnerability assessment and penetration testing projects

• Information-security audits

• Cybersecurity compliance

• Risk assessment and remediation

• Government cybersecurity programs

• Inspector General or internal-audit environments

• Enterprise cybersecurity testing programs

Relevant project-management or cybersecurity certifications are desirable.

Security and Information Handling

No Secret or Top Secret security clearance requirement has been identified for this position in the RFQ.

The selected individual must nevertheless be capable of appropriately safeguarding sensitive cybersecurity information, including testing results, risk information, system information, findings, remediation information, and other restricted customer information.

U.S. citizenship is an SMX hiring requirement for this posting.

Compensation

The anticipated compensation range is:

$55.66–$57.84 per hour

This range represents approximately 51%–53% of the applicable $109.14/hour 2026 Project Manager billing rate used for internal pricing analysis.

Actual compensation within the stated range may depend on relevant experience, qualifications, certifications, availability, and final project requirements.

About the Engagement

The State of Florida is seeking highly adaptive cybersecurity technical assistance and subject-matter expertise to strengthen enterprise-wide cybersecurity audit efforts. The work includes cybersecurity testing and analysis supporting state agency Offices of Inspector General while remaining independent from operational testing conducted by individual agencies or the Florida Digital Service.

This position is contingent upon contract award and final customer requirements.