Cybersecurity Program Manager - TS/SCI

Spry Methods, Inc.; Linthicum (MD); On-site; USD 120,000 - 180,000; Full time

Job summary

Spry Methods, Inc. seeks a Cybersecurity Program Manager to lead IT and cybersecurity operations across enterprise environments. You will coordinate government stakeholders, manage contractor personnel, and ensure program requirements are met with strong governance.

The role requires TS/SCI eligibility, 5+ years in IT leadership and budgeting, and experience implementing NIST/ISO/CMMC frameworks. On-site in Linthicum, MD supporting DoD/IC programs.

Qualifications

• TS/SCI clearance eligibility required.
• Five+ years of IT leadership and accountability experience.
• Five+ years of IT strategic planning experience.
• Five+ years of workforce planning experience.
• Five+ years of budgeting and investment management experience.
• Five+ years of experience managing IT investments/resources.
• Five+ years of experience implementing information security and privacy programs.
• Five+ years of supporting digital accessibility initiatives.
• Experience implementing cybersecurity frameworks such as NIST, ISO 27001, or CMMC.
• Experience coordinating across multiple technical teams and managing dependencies.
• Experience incident/crisis response activities and vendor management.
• Experience with DoD, IC, or Federal IT programs preferred.

Responsibilities

• Provide management and oversight of contractor and subcontractor personnel.
• Serve as primary contractor point of contact for CODE activities.
• Coordinate between Government stakeholders and contractor teams.
• Track requirements, activities, risks, decisions, schedules, and performance.
• Ensure quality and compliance with program requirements.
• Coordinate tasks across project teams to avoid resource conflicts.
• Support IT strategic planning, budgeting, and investment management.
• Implement cybersecurity frameworks such as NIST, ISO 27001, or CMMC.
• Oversee cybersecurity risk assessments and vulnerability testing.
• Coordinate security audits and track corrective actions.
• Lead crisis-response during significant security incidents.
• Oversee third-party security vendors and evaluate acquisitions for security requirements.
• Support agency-wide information security, privacy, and cybersecurity education.

Skills

TS/SCI eligibility

IT leadership

IT strategic planning

IT workforce planning

IT budgeting

Federal IT programs

RMF familiarity

DevSecOps

CMMC

Job description

Spry Methods is seeking a Cybersecurity Program Manager to provide leadership and oversight for personnel supporting enterprise information technology and cybersecurity operations. This key personnel position will serve as a primary contractor point of contact, coordinate work across technical teams, and ensure activities are completed efficiently and in accordance with program requirements. The Task Lead will support IT strategy, workforce planning, budgeting, investment management, cybersecurity, privacy, and digital accessibility. The position will also oversee cybersecurity compliance, risk assessments, vulnerability testing, security audits, incident response coordination, and third-party security vendors.

What Your Day-To-Day Looks Like (Position Responsibilities):

• Provide management and oversight of assigned contractor and subcontractor personnel.
• Serve as a primary contractor point of contact for CODE activities.
• Facilitate communication and coordination between Government stakeholders and contractor teams.
• Track requirements, technical activities, risks, decisions, schedules, and performance using established management practices.
• Ensure the quality and efficiency of contractor performance and compliance with program requirements.
• Coordinate tasks and dependencies across project teams to prevent resource conflicts.
• Support IT strategic planning, workforce planning, budgeting, investment management, and organizational accountability.
• Implement and maintain cybersecurity compliance frameworks such as NIST, ISO 27001, or CMMC.
• Oversee cybersecurity risk assessments and vulnerability testing to identify and mitigate emerging threats.
• Coordinate internal and external security audits and track corrective actions.
• Lead contractor crisis-response activities during significant security incidents, including detection, containment, recovery, and stakeholder coordination.
• Oversee third-party security vendors and support evaluation of acquisitions against applicable security requirements.
• Support agency-wide information security, privacy, digital accessibility, and cybersecurity education initiatives.
• Assist with applicable financial and business processes without performing inherently governmental functions.
• Make binding decisions for the contractor organization and proactively communicate technical, contractual, programmatic, personnel, and resource risks.

What You Need to Succeed (Minimum Requirements):

• TS/SCI clearance eligibility
• At least five years of experience in IT leadership and accountability, including responsibility for implementing IT management functions.
• At least five years of experience in IT strategic planning.
• At least five years of experience assessing IT workforce requirements and developing workforce strategies and plans.
• At least five years of experience supporting annual and multiyear IT planning, programming, and budgeting.
• At least five years of experience managing, evaluating, or assessing IT investments and resources.
• At least five years of experience establishing, implementing, or supporting compliance with an organization-wide information security and privacy program.
• At least five years of experience supporting digital accessibility of information and communications technologies.
• Experience implementing cybersecurity frameworks such as NIST, ISO 27001, or CMMC.
• Experience overseeing cybersecurity risk assessments, vulnerability testing, security audits, or corrective-action activities.
• Experience coordinating work across multiple technical teams and managing dependencies, staffing, schedules, and resource conflicts.
• Experience supporting incident or crisis-response activities involving detection, containment, recovery, and stakeholder communications.
• Experience managing third-party technology or cybersecurity vendors.
• Experience supporting DoD, Intelligence Community, or other Federal IT and cybersecurity programs preferred.
• Familiarity with DoD Risk Management Framework, ATO or continuous ATO processes, NIST SP 800-53, DoD 8140 workforce requirements, DevSecOps, and enterprise cybersecurity operations preferred.
• Strong written and verbal communication skills, including the ability to brief Government and executive stakeholders

We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.

Final compensation will be based on experience, qualifications, certifications, clearance level, and contract requirements. This position is contingent upon contract award.