Cybersecurity & Compliance IT Project Manager

JESSICA CARROLL

IT PROJECT MANAGER CYBERSECURITY & COMPLIANCE

Dale City, VA • 540-***-**** • *******.*.*******@*******.***

PROFESSIONAL SUMMARY

IT Project Manager with 14+ years of experience driving cybersecurity and compliance initiatives across regulated, air-gapped, and federal environments. MS in Information Assurance & Cybersecurity. Proven track record managing CMMC, NIST 800-171/800-53, and SSP lifecycle programs—on schedule and audit-ready. Recognized for translating complex compliance requirements into executable project plans, building cross-functional alignment, and delivering measurable risk reduction.

CORE COMPETENCIES

CMMC & NIST 800-171/53 Compliance

SSP Lifecycle Management

Risk Assessment & Mitigation

Change Control (CCB)

Cross-Functional Project Leadership

Stakeholder & Executive Engagement

Cybersecurity Assessments

Governance & Audit Readiness

PROFESSIONAL EXPERIENCE

Cyber Assurance Project Manager – BAE Systems Inc. Jun 2021 – Present

•Spearheaded sector-wide CMMC compliance program, reducing audit findings by aligning engineering, legal, and operations teams around a unified control framework.

•Founded and chaired the Engineering Change Control Board (CCB), ensuring 100% of system changes were reviewed against NIST 800-171/800-53 requirements before implementation.

•Built executive-facing dashboards tracking compliance actions, system changes, and milestone status—improving leadership visibility and accelerating decision-making.

•Managed concurrent compliance projects across air-gapped environments, coordinating multi-team execution and delivering on-time status reporting to senior stakeholders.

•Authored and maintained SSPs, SOPs, and BIA documentation aligned to CMMC and risk appetite requirements; supported two steering committees with compliance reporting.

•Led cybersecurity assessment planning (SCDT scheduling, Archer workflow) and readiness activities, ensuring programs were audit-ready ahead of scheduled reviews.

•Mentored project team members on prioritization and compliance execution, improving team throughput and consistency across concurrent workstreams.

Principal System Administrator – BAE Systems Inc. Nov 2019 – Jun 2021

•Administered Linux accounts and server infrastructure across 15 deployments, maintaining 99%+ availability for mission-critical systems.

•Resolved performance and availability issues proactively, reducing escalations and end-user downtime through rigorous monitoring and tuning.

•Improved team operational standards by introducing emerging Linux tools and recommending process improvements adopted across the environment.

Linux Admin III & Cybersecurity Engineer – ActioNet Oct 2017 – Oct 2019

•Led 24/7 Production Support and Engineering teams supporting 54 applications across U.S. Bankruptcy, District, and Appellate Courts—maintaining mission-critical uptime with daily reporting to federal leadership.

•Reduced operational risk by implementing centralized LDAP authentication, automating account management, and driving disciplined vulnerability remediation and patch management.

•Served as Deputy Program Manager for a mature Agile program, supporting on-time delivery and maintaining strong stakeholder engagement.

•Migrated legacy systems to open-source solutions, cutting operating costs while sustaining performance and reliability benchmarks.

Operational Medicine System Administrator II – MITRE CAASD Feb 2015 – Sept 2017

•Supported Defense Healthcare Management System Modernization, administering RHEL 6.5 infrastructure and VMware vSphere environments for remote defense healthcare operations.

•Authored Disaster Recovery Plan and engineering documentation that improved team readiness and field deployment consistency.

•Developed Bash automation scripts that reduced manual implementation effort and improved deployment repeatability across mobile environments.

Linux System Administrator – DISA HQ – PKI Operations Jul 2014 – Nov 2014

•Maintained NIPR/SIPR RHEL systems for DoD PKI, executing STIG implementation and validation that sustained full compliance with DISA security standards.

•Reviewed Engineering Change Requests for accuracy and documentation quality, supporting a disciplined change process aligned to federal requirements.

Software Engineer – Army Research Lab – Lockheed Martin Jun 2013 – Jul 2014

•Provided Tier II supports a high-performance supercomputing environment, provisioning accounts, deploying software releases, and troubleshooting mission-critical applications.

•Corrected Linux scripts and documented findings, improving reliability of operational workflows and reducing recurring incidents.

Proprietary Systems Specialist I & II – U.S. State Department Oct 2011 – Jun 2013

•Delivered Tier I/II support across 14 state regions, managing performance metrics and achieving consistent service-level targets through disciplined floor coverage and workflow distribution.

•Trained and mentored new team members, accelerating readiness and building a high-performance culture focused on responsiveness and customer outcomes.

EDUCATION

MS, Information Assurance & Cybersecurity – Digital Forensics Focus Capella University

BS, Networking & Telecommunications University of Phoenix

CERTIFICATIONS IN PROGRESS

CISM (Certified Information Security Manager) – Anticipated 2026

Contact this candidate