Project Manager III , Security Related Services

Job Title : Project Manager III , Security Related Services

Locations: Denver (CO), Carol Stream (IL), Plano (TX)

Duration: 12+ Months

Job Description:

Core Requirements for Security-Related SOWs:

• Security projects within the department often fall under the purview of the Client or Supply Management, especially when involving critical assets or information processing. Key components of these SOWs include
• Supplier Information Security Requirements: SOWs for IT or information processing must address specific security requirements, including data security, access control, and incident response.
• Personnel Screening: SOWs must include requirements for contractor personnel security clearances, such as "non-sensitive" clearances, which must be granted before work begins.
• Infrastructure & Maintenance Standards: For physical security projects like CCTV systems, SOWs specify that all work must align with USPS building and design standards.
• Information Integrity & Monitoring: Suppliers are contractually required to allow the USPS to monitor and audit their performance for compliance with internal policies. They are also responsible for remediating any identified vulnerabilities at their own expense.

Specific Security Project Domains:

Recent security-related project initiatives and requirements include:

• Physical Security Modernization: Focuses on upgrading high-risk areas, including installing hardened blue collection boxes (over 15,000 deployed) and electronic locking mechanisms in mail receptacles (28,000 installed) to deter theft.
• Surveillance Systems: Integrated Security and Investigative Platform (ISIP) CCTV systems require SOWs for preventative maintenance and 24/7 emergency support. Suppliers typically must have at least five years of industry experience and specific brand certifications (e.g., Axis, March Network, Hanwha Vision).
• Network Distribution Center (NDC) Security: Projects at NDCs often address gates and fencing, doors and locks, access control, and registry/remittance security.
• Application Security Assessments: For product solutions, SOWs may require evaluating security controls to prevent cyberattacks and unauthorized access to restricted data.

Risk Management and Compliance:

• Purchase/SCM teams are mandated to ensure SOWs incorporate adequate safeguards to prevent misuse or improper disclosure of personal information (PII).
• Risk Identification: The process includes risk identification, analysis, and response planning as part of the overall supply chain security management.
• Documentation Standards: All information provided by vendors in response to a solicitation must be concise, specific, and demonstrate a thorough understanding of the requirements outlined in the SOW.