SMX is seeking a Process Manager responsible for managing and improving processes, to include overseeing the evaluation, approval, and compliance of technology products, as well as enforcing data audit policies in alignment with Army and Intelligence Community (IC) standards. This role combines two critical functions-managing the organization’s APL to ensure only high-quality, compliant, and cost-effective products are approved for use, and overseeing cybersecurity-related policies and procedures to maintain data integrity and regulatory compliance.

As the APL Manager, this individual develops and maintains rigorous criteria for product evaluation, conducts detailed reviews of hardware and software submissions, and collaborates with cross-function teams to promote the use of approved products. They also oversee the APL lifecycle, ensuring updates reflect evolving standards, technological advancements, and organizational needs. Additionally, they play a key role in supply chain risk management, product security assessments, and training personnel on APL adherence.

As the Army Data Audit Manager (ADAM), this role is responsible for developing and enforcing cybersecurity and data transfer policies for INSCOM G6 and GISA. The ADAM ensures compliance with Army, DoD, and IC regulatory standards through policy development, training programs, and regular audits. This includes reviewing and approving data transfer requests, maintaining training compliance, and providing detailed reporting to leadership to ensure a robust and effective data audit program.

This dual-role position requires a strong technical background, expertise in regulatory compliance, risk assessment capabilities, and effective communication skills to support procurement, cybersecurity, and operational excellence. This is an on-site role Monday - Friday.

Essential Duties & Responsibilities

Approved Products List (APL) Management:

• Product Evaluation and Management
  • Develop and maintain criteria for evaluating hardware and software products for inclusion or exclusion on the APL, considering quality, security, compliance, and cost-effectiveness. 
  • Conduct thorough evaluations, including testing, inspections, and compliance assessments, to verify product adherence to standards. 
  • Regularly review and update the APL to reflect current technological, regulatory, and operational requirements.
• Compliance and Risk Management
  • Ensure all listed products comply with DoD, Army, and industry-specific standards and regulations.
  • Conduct supply chain risk assessments and make informed recommendations for product inclusion or removal
  • Assist security control assessors with product testing and risk mitigation strategies.

• Stakeholder Collaboration and Training
  
  • Work with procurement, engineering, and project teams to promote the correct use of APL-approved products. 
  • Address and resolve disputes related to product approvals or removals.
  • Provide training and guidance to employees and contracts on APL-compliance and best practices.
• Data Management and Reporting
  • Maintain comprehensive records of all APL-listed products, including compliance documentation and test reports.
  • Generate reports detailing APL updates, compliance trends, and risk assessments to support decision-making.
  • Analyze data to assess the effectiveness of the APL and recommend process improvements.

• Continuous Improvement
  • Monitor industry developments, emerging technologies, and evolving compliance standards to enhance APL management.
  • Implement best practices in product evaluation, risk assessment, and regulatory compliance.

Army Data Audit Management (ADAM):

• Policy Development and Compliance
  • Develop and enforce cybersecurity policies that align with INSCOM G6, GISA, DoD, and IC regulatory frameworks.
  • Ensure policies and reviewed and updated regularly to remain compliant with evolving Army and IC standards.
• Regulatory Analysis and Policy Updates
  • Analyze guidance from Army, DoD, and IC sources and integrate relevant requirements into policy frameworks.
  • Define and enforce guidelines for privileged access, ensuring compliance with data security protocols.
• Training and Program Implementation
  • Conduct training sessions for personnel at various levels of expertise on data transfer standards and compliance requirements.
  • Develop and distribute standardized training materials to ensure workforce adherence to cybersecurity policies.
  • Ensure all data transfer personnel meet annual training and compliance requirements, including Privileged Access Agreements.
• Daily Oversight and Reporting
  • Review and approve daily data transfer requests at the G6 level.
  • Submit weekly compliance reports to the ADAM Program Manager and G6 Cybersecurity Chief.
  • Assist in the preparation of high-level reports that track the status of authorized personnel and overall program effectiveness.
• Program Maintenance and Improvement
  • Conduct audits and assessments to verify compliance and data transfer policies.
  • Identify opportunities for program enhancement and implement improvements to optimize efficiency and security.

Required Skills & Experience 

• Security Clearance: Active Top Secret (TS) security clearance with eligibility for SCI and NATO read on prior to employment.
• Certification: CND, FITSP-O, GFACT, GICSP, or GSEC
• Education: Bachelor’s degree in engineering, supply chain management, business, information technology, cybersecurity, data science, or computer science from an ABET-accredited or CAE-designated institution. 
• Experience:  3-5 years of experience in procurement, product management, or regulatory compliance related to APL.
• At least 5 years of experience managing data transfer processes and enforcing Army-level cybersecurity policies.
• Proven ability to interpret and implement IC, DoD, and Army regulations. 
• Skills: Strong project management skills overseeing APL maintenance and compliance.
• Effective communication and conflict-resolution skills for addressing APL disputes and cybersecurity concerns.
• Experience in regulatory compliance, risk assessment, and product evaluations.
•  Product Evaluation & Compliance: Expertise in assessing hardware/software quality, safety, and regulatory compliance.
• Regulatory Knowledge: Strong understanding of DoD, Army, and IC cybersecurity and procurement requirements.
• Project Management: Proven ability to oversee the lifecycle of APL management and data audit programs.
• Data Analysis & Reporting: Proficiency in analyzing product performance and cybersecurity trends to inform decision-making.
• Collaboration & Communication: Ability to work cross-functionally, train personnel, and resolve disputes.
• Training & Leadership: Skilled in guiding teams on APL compliance and cybersecurity best practices.
• Policy Development: Expertise in formulating and updating cybersecurity and procurement policies.
• Analytical Thinking: Ability to assess complex compliance issues and implement corrective action.
• Attention to Detail: Ensures accuracy in data transfer approvals, policy updates, and risk assessments.
• Problem-Solving: Identifies inefficiencies in procurement and security processes, implementing effective solutions.

Desired Skills & Experience 

•  Prior experience in an INSCOM environment or Army-level cybersecurity programs.
• Familiarity with Intelligence Community Directive (ICD) policies governing data transfers.
• Experience in developing training programs and delivering instruction to DoD personnel.
• Strong analytical skills for policy development, compliance documentation, and reporting.

Application Deadline:  May 26, 2025

#CJPOST

#LI-onsite