Deputy Cybersecurity Program Manager

Position Description

Deputy Program Manager — Cybersecurity Services (ISSO Support)

Excentium, Inc.

• Position Title:
  
  Deputy Program Manager (DPM) — Key Personnel
• Program /
  
  Contract:
  
  Cybersecurity Services Program (Information System Security Officer / ISSO Support)
• Client:
  Federal Government Agency
• Location:
  
  Contractor facility within the National Capital Region (NCR); on-site presence required at customer facilities in the Washington, DC metro area, with occasional travel to other domestic and/or overseas locations as required
• Clearance Required:
  
  Active Secret personnel security clearance, to be maintained throughout the period of performance
• Status:
  Key Personnel — full-time upon contract award; availability required within the timeframe specified by the awarded contract (commonly within 10 calendar days of award)

The Deputy Program Manager (DPM) serves as the secondary point of contact for all contractual, administrative, and performance matters on a federal cybersecurity services engagement providing Information System Security Officer (ISSO) support, standing ready to step into the Program Manager's (PM) role at any time to preserve continuity of leadership — and the mandate goes beyond steady-state compliance. We are looking for a cybersecurity leader who wants to help a federal customer genuinely modernize how it applies the Risk Management Framework (RMF): fully leveraging the customer's existing processes and investments, while identifying and recommending continuous monitoring and continuous authorization (cATO) models, streamlined Assessment and Authorization (A&A) processes, and automation or Dev Sec Ops  principles where appropriate, rather than simply maintaining the status quo.

The DPM shares leadership of the effort alongside the PM, helps ensure deliverables and timelines are met, and interfaces with the customer's Contracting Officer (CO) and Contracting Officer's Representative (COR) — while also acting as a trusted advisor who brings forward‑looking RMF practice into that relationship. This is typically a Key Personnel position: the individual named for this role is often a stated basis for contract award and, once under contract, generally may not be removed, replaced, or substituted without prior written Contracting Officer approval.

This position is built for a thought leader, not a caretaker. Excentium is looking for someone who wants to help leave the customer's RMF program measurably better than they found it, with room to:

• Help shape the customer's RMF roadmap alongside the PM — leveraging what the customer already has in place and proposing better paths to authorization (continuous monitoring/cATO, control automation, RMF-as-code) where appropriate, rather than just executing a fixed scope of work.
• Get the most out of the customer's existing GRC and compliance tooling, and recommend modern tooling or automation where appropriate, to reduce the paperwork burden of traditional Assessment and Authorization work for the customer's own security staff.
• Represent Excentium's cybersecurity practice externally — through publications, conference presentations, professional associations, or agency working groups focused on RMF modernization, Zero Trust, and continuous authorization.
• Help build and mentor a high-performing ISSO/compliance team, elevating the program's practice and setting a standard other engagements can point to.
• Partner with Excentium's broader Cybersecurity Professional Services practice — including its FedRAMP 3
  
  PAO assessors and CMMC advisors — to bring cross-program innovation back into this engagement.
• Grow into the Program Manager role over time, with direct exposure to full contract accountability as the PM's designated backup.