SCOPE OF WORK

This program will support manage multiple initiatives related to the Enterprise Technology

Security platform to ensure that the Authority is meeting all regulatory requirements for

information technology security, not exposing sensitive infrastructure operations, and mitigating

unwanted information risks of the Authority and its stakeholders. Partner with IT network teams

to install, update, modify, and coordinate security related hardware and software in the MARTA

environment for the purpose of improving MARTA cyber security. Project management services

may be utilized for any security related implementations or modifications. The deliverables

include but are not limited to the following: Information Security Assessment, Authority-wide

security training program, Data Categorization, Risk Assessment, Enhanced Security for

Wireless Network and CSET/Homeland Security Assessment Remediation and other security

related projects in accordance with the Department of Technology's strategic needs.

QUALIFICATIONS

• 4-Y ear Degree in Computer Science, Business, Information Technology or related field.

• 5+ years managing IT projects with moderate to high complexity.

• Experience leading IT security projects within the last 3 years.

• Solid technical background, with understanding or hands-on experience with various

information security technologies/controls.

• Excellent written and verbal communication skills.

• Solid organizational skills including attention to detail and multi-tasking skills.

• PMP Certification strongly desired.

• CISSP, CSPM or other security certification preferred.

DELIVERABLES

The Technology Security Project Manager shall provide the following deliverables in support of

the MART A Technology Department.

Item Deliverables Name Title Hours Rate Date of

Completion

01 The PM will lead a team of

cross-functional resources 400 06/30/19

in the execution of project

deliverables for Security

projects. In parallel, the

PM will create and

maintain the

following project

management

artifacts/ documents:

responsibility

matrix (RACI),

project

management plan,

project schedule,

1

DocuSign Envelope ID: 3EE409AE-061A-46F2-B89D-EE804555BAEA

and procurement

related

documents (SOW,

Executive Summary,

Independent Cost

Estimate), weekly status

reports, budget

documents (i.e. spend

plan, acquisition plan),

risks and issues logs, and

lessons learned. Support

the achievement of the

project objectives,

perform the following

tasks: Identify roles and

responsibilities, define

and estimate activities,

determine the budget and

control costs, manage and

control the scope,

manage change controls

as needed, facilitate

status meetings, review

and validate scope,

schedule and budget.

02 Vulnerability

Management Remediation 200 06/30/19

Coordination - Support

the achievement of the

project objectives to

ensure that the network is

secure and efforts to align

the network with our

security posture are

executed by performing

the following tasks:

Identify roles and responsibilities, define

and estimate activities,

work with QSA to

determine path forward on

critical items; determine

the budget and control

costs, manage and control

the scope, manage change

controls as needed,

facilitate status meetings,

review and validate

invoices for services

2

DocuSign Envelope ID: 3EE409AE-061A-46F2-B89D-EE804555BAEA

rendered and ensure

invoices are paid and

closed out.

03 Payment Card Industry

Certification - Support 200 06/30/19

the achievement of the

project objectives to

ensure that the network is

secure and efforts to align

the network with our

security posture are

executed by performing

the following tasks:

Identify roles and

responsibilities, define

and estimate activities,

work with QSA to

determine path forward on

critical items; determine

the budget and control

costs, manage and control

the scope, manage change

controls as needed,

facilitate status meetings,

review and validate

invoices for services

rendered and ensure

invoices are paid and

closed out.

PERIOD OF PERFORMANCE

The effective period of this Work Order will be for the duration of FY16. Start date will be February

2019, through June 30, 2019. The total allotted hours for the contract is 800 hours and shall not

exceed the set limit unless authorized by MART A.

COST

The Cost of the work performed by the Consultant as authorized by this work order shall not

exceed$ --------

COMPENSATION

Compensation for the work authorized herein shall be made in accordance with each Consultants GSA

Schedule and hourly rate, and reported for actual hours worked. Payment Applications shall be submitted

monthly and must include the following information:

• Vendor Purchase Order Number - -------

• Work Order Number- 2019-

• Project Task Number -

Invoices shall include a breakdown of individual contractor billable time worked and project accounts.

3

DocuSign Envelope ID: 3EE409AE-061A-46F2-B89D-EE804555BAEA

404 Not Found