Cybersecurity Project Manager

Position Description

[Company] is building a senior team to support the cybersecurity program of a federal agency. We're looking for a Cybersecurity Project Manager to lead the program and serve as the single point of accountability to the customer for performance, cost, and schedule. [One-line company description.]

Leads the overall direction and management of all cybersecurity support activities on a federal program. Owns performance, cost, and schedule outcomes and ensures execution meets customer expectations and contract requirements. Translates complex technical and vulnerability information for non-technical stakeholders while guiding secure cloud implementation and NIST Risk Management Framework (RMF)-aligned delivery. This role is central to customer confidence in program control and team coordination.

Reports to [Company] program leadership. Serves as the primary contractor point of contact to the government customer for performance, cost, and schedule, and coordinates with partner company leads on staffing and delivery.

• Lead overall direction and management of all cybersecurity support activities, delivering within defined performance, cost, and schedule parameters.
• Serve as the primary contractor interface to the government customer for status, risks, issues, and change management; prepare and brief weekly status reports and other contract deliverables.
• Plan, prioritize, and track work across risk management (RMF), security engineering, application security, cyber defense, security operations, and assessment.
• Coordinate senior and supporting staff across a multi-company team; manage surge and backfill planning.
• Manage changes to key staff in line with contract requirements, including advance written notice and customer approval of replacements with equal or better qualifications.
• Guide secure implementation of cloud solutions and align delivery with NIST RMF and federal cybersecurity policy, standards, and guidelines.
• Synthesize technical findings and vulnerability information into clear briefings for program, mission, and leadership stakeholders.
• Identify, escalate, and mitigate risks that could affect performance; maintain audit-ready records of decisions and deliverables.
• Keep resumes and qualification packages for senior staff current and available for customer review.
• Foster collaboration among application teams, security operations, assessors, and assessment and authorization (A&A) specialists to reduce cyber risk while enabling mission delivery.
• Drive continuous improvement of status reporting, quality gates, and customer engagement cadence.
• Coordinate leadership coverage with the Lead Cybersecurity Manager (ISSM) so program leadership is never interrupted.

• Current CISSP certification
• Current Project Management Professional (PMP) certification
• Ability to obtain and maintain a Public Trust (MBI); candidates must be able to pass a federal background investigation
• U.S. citizenship
• Bachelor's degree from an accredited college or university and 10+ years of related experience
• Recent (past two years) cloud security experience, including guiding secure implementation of cloud solutions
• Demonstrated expertise in NIST RMF and federal cybersecurity policy, standards, and guidelines
• Demonstrated ability to explain technology and vulnerabilities clearly to non-technical audiences and to synthesize information from multiple sources
• Senior experience directing IT or cybersecurity program or project delivery for federal customers

• Active Public Trust (MBI) already in hand (strongly preferred)
• Recent federal cybersecurity program or project management experience, especially with federal civilian agencies
• Experience supporting secure implementation of cloud-native and emerging technologies, such as AI and robotic process automation (RPA)
• Advanced degree, or a degree in cybersecurity, IT, or a related field
• Familiarity with federal acquisition, contracting officer's representative (COR) engagement, and multi-company teaming delivery models
• Experience managing portfolios that span RMF, application security tooling (static and dynamic testing, code quality, endpoint protection), and cyber defense

• Senior, flexible cybersecurity professional able to support related workstreams (risk management, application security, cyber defense, assessment, and program support) as mission needs change.
• “Recent” experience means experience within the past two (2) years.
• Ability to work on-site at the assigned location as required by the client.

This position is contingent upon contract award and funding. This description may change based on final contract requirements.

[Equal opportunity employer statement, including VEVRAA, Section 503, and E-Verify language where applicable]