Program Manager

Overview

The Program Manager provides day-to-day leadership and contract execution management for Agency IT and cybersecurity support services. This role plans and coordinates work across cybersecurity operations, compliance, and modernization activities to maintain a secure, compliant, and audit-ready environment under the strategic oversight of the Agency CIO/PMO. The Program Manager serves as the primary point of contact for task order performance, ensuring staffing, schedules, deliverables, quality, and stakeholder communications meet contract requirements.

• Lead overall task order execution, including integrated planning, scheduling, milestone tracking, and performance reporting.
• Coordinate cybersecurity operations and continuous monitoring activities to ensure timely detection, response, and mitigation of threats; track actions to closure.
• Oversee audit readiness and documentation management, ensuring artifacts are current, complete, and organized to support internal reviews and external audits.
• Manage Security Assessment & Authorization (RMF/SA&A) support efforts, including development/maintenance of SSPs, risk assessments, POA&Ms, and other authorization package artifacts.
• Plan and coordinate FISMA reporting and CDM support activities; ensure required metrics and supporting evidence are submitted accurately and on time.
• Coordinate insider threat and privileged access governance support, including tracking access reviews, control implementation, and risk-reduction actions.
• Direct development and maintenance of cybersecurity policies, procedures, and governance documentation aligned to federal requirements (e.g., NIST and OMB guidance).
• Lead incident response coordination and communications, including escalation, stakeholder updates, and integration of threat intelligence into operational decisions.
• Oversee security training and awareness activities, including role-based training planning, delivery coordination, and compliance tracking.
• Ensure configuration management and change control processes are followed, documented, and auditable to maintain integrity and traceability.
• Facilitate cross-functional coordination with engineering and enterprise architecture stakeholders to align technical planning and modernization efforts with mission needs.
• Manage subcontractors and/or supporting teams as applicable; set expectations, monitor performance, and ensure timely delivery of all contract requirements.

• Bachelor’s degree in IT, Business, or a related field (Master’s preferred).
• 8+ years of experience managing federal IT contracts.
• PMP or equivalent project/program management certification.
• Strong knowledge of federal acquisition and IT governance.
• Demonstrated ability to manage cost, schedule, performance, and quality across multiple concurrent work streams.
• Strong written and verbal communication skills, including experience preparing executive-ready status reports and briefing senior stakeholders.

• Experience supporting federal cybersecurity programs, including RMF/ATO, FISMA reporting, and Continuous Diagnostics and Mitigation (CDM).
• Familiarity with NIST Risk Management Framework (NIST SP 800-37) and NIST security controls (e.g., NIST SP 800-53).
• Experience leading audit support efforts (e.g., OIG, GAO, independent assessments) and managing corrective action tracking.
• Experience coordinating incident response activities and integrating threat intelligence into operational planning.
• Background working with configuration management, change control, and IT service management practices in regulated environments.

• Integrated project plan, schedule, and staffing plan aligned to task order requirements.
• Recurring status reports (weekly/monthly) covering accomplishments, risks/issues, metrics, and upcoming milestones.
• Risk/issue/action item logs with clear owners and due dates; documented decisions and meeting minutes as required.
• Quality reviews of audit-ready documentation and cybersecurity authorization artifacts prior to submission.
• Stakeholder communications plan and cadence for CIO/PMO coordination and…