Cybersecurity Program Manager - TS/SCI

Lever, Inc.; Linthicum (MD); On-site; USD 200,000 - 210,000; Full time

Job summary

Spry Methods is seeking a Cybersecurity Program Manager to provide leadership and oversight for personnel supporting enterprise IT and cybersecurity operations. The role coordinates across technical teams, supports IT strategy, budgeting, and investment management, and ensures compliance with cybersecurity standards and privacy requirements.

The position will oversee risk assessments, vulnerability testing, security audits, incident response, and third-party vendors.

Qualifications

• TS/SCI clearance eligibility.
• Five+ years IT leadership and accountability experience.
• Five+ years IT strategic planning experience.
• Five+ years assessing IT workforce requirements and planning.
• Five+ years managing IT investments and resources.
• Five+ years implementing organization-wide information security and privacy programs.
• Experience with DoD, Intelligence Community, or Federal IT programs preferred.
• Familiarity with DoD RMF, ATO, NIST SP 800-53, and DoD 8140 workforce requirements.

Responsibilities

• Provide management and oversight of contractor personnel.
• Serve as primary contractor POC for CODE activities.
• Coordinate with Government stakeholders and contractor teams.
• Track requirements, activities, risks, and schedules using PM practices.
• Ensure quality and compliance with program requirements.
• Coordinate tasks across project teams to prevent resource conflicts.
• Support IT strategic planning, budgeting, and investment management.
• Implement cybersecurity frameworks such as NIST, ISO 27001, or CMMC.
• Oversee cybersecurity risk assessments and vulnerability testing.
• Coordinate security audits and track corrective actions.
• Lead crisis-response during significant security incidents.
• Oversee third-party security vendors and acquisitions against security requirements.
• Support agency-wide information security, privacy, and cybersecurity education initiatives.
• Assist with financial and business processes without performing inherently governmental functions.
• Make binding decisions and communicate risks to leadership.

Skills

IT leadership

Strategic planning

Budgeting

Compliance programs

DoD RMF

NIST SP 800-53

DevSecOps

Vendor management

CMMC

Stakeholder briefing

Tools

RMF Process

Cybersecurity standards

Job description

Spry Methods is seeking a Cybersecurity Program Manager to provide leadership and oversight for personnel supporting enterprise information technology and cybersecurity operations. This key personnel position will serve as a primary contractor point of contact, coordinate work across technical teams, and ensure activities are completed efficiently and in accordance with program requirements. The Task Lead will support IT strategy, workforce planning, budgeting, investment management, cybersecurity, privacy, and digital accessibility. The position will also oversee cybersecurity compliance, risk assessments, vulnerability testing, security audits, incident response coordination, and third-party security vendors.

What Your Day-To-Day Looks Like (Position Responsibilities):

• Provide management and oversight of assigned contractor and subcontractor personnel.

• Serve as a primary contractor point of contact for CODE activities.

• Facilitate communication and coordination between Government stakeholders and contractor teams.

• Track requirements, technical activities, risks, decisions, schedules, and performance using established management practices.

• Ensure the quality and efficiency of contractor performance and compliance with program requirements.

• Coordinate tasks and dependencies across project teams to prevent resource conflicts.

• Support IT strategic planning, workforce planning, budgeting, investment management, and organizational accountability.

• Implement and maintain cybersecurity compliance frameworks such as NIST, ISO 27001, or CMMC.

• Oversee cybersecurity risk assessments and vulnerability testing to identify and mitigate emerging threats.

• Coordinate internal and external security audits and track corrective actions.

• Lead contractor crisis-response activities during significant security incidents, including detection, containment, recovery, and stakeholder coordination.

• Oversee third-party security vendors and support evaluation of acquisitions against applicable security requirements.

• Support agency-wide information security, privacy, digital accessibility, and cybersecurity education initiatives.

• Assist with applicable financial and business processes without performing inherently governmental functions.

• Make binding decisions for the contractor organization and proactively communicate technical, contractual, programmatic, personnel, and resource risks.

What You Need to Succeed (Minimum Requirements):

• TS/SCI clearance eligibility

• At least five years of experience in IT leadership and accountability, including responsibility for implementing IT management functions.

• At least five years of experience in IT strategic planning.

• At least five years of experience assessing IT workforce requirements and developing workforce strategies and plans.

• At least five years of experience supporting annual and multiyear IT planning, programming, and budgeting.

• At least five years of experience managing, evaluating, or assessing IT investments and resources.

• At least five years of experience establishing, implementing, or supporting compliance with an organization-wide information security and privacy program.

• At least five years of experience supporting digital accessibility of information and communications technologies.

• Experience implementing cybersecurity frameworks such as NIST, ISO 27001, or CMMC.

• Experience overseeing cybersecurity risk assessments, vulnerability testing, security audits, or corrective-action activities.

• Experience coordinating work across multiple technical teams and managing dependencies, staffing, schedules, and resource conflicts.

• Experience supporting incident or crisis-response activities involving detection, containment, recovery, and stakeholder communications.

• Experience managing third-party technology or cybersecurity vendors.

• Experience supporting DoD, Intelligence Community, or other Federal IT and cybersecurity programs preferred.

• Familiarity with DoD Risk Management Framework, ATO or continuous ATO processes, NIST SP 800-53, DoD 8140 workforce requirements, DevSecOps, and enterprise cybersecurity operations preferred.

• Strong written and verbal communication skills, including the ability to brief Government and executive stakeholders

$200,000 - $210,000 a year

Final compensation will be based on experience, qualifications, certifications, clearance level, and contract requirements. This position is contingent upon contract award.