Senior Project Manager

Steampunk; Washington (District of Columbia); On-site; USD 150,000 - 190,000; Full time

Job summary

Steampunk is seeking a Senior Project Manager in Washington, DC, to drive program management for a large-scale federal cybersecurity program. The role requires coordination of cross-functional teams while overseeing the RiskOps roadmap execution and maintaining the master program schedule.

The candidate must have strong project management skills, a Master's degree, and relevant certification. The salary range for this position is projected between $150,000 and $190,000 annually.

Qualifications

• Local to the Washington, DC Metro area; required to be onsite 1 day per week.
• Ability to obtain a U.S. government Public Trust security clearance.
• Master's degree in a related field with 7 years of experience, or Bachelor's with 10 years.
• Active certification in project management like PMP or CSM.

Responsibilities

• Lead project delivery in a government consulting environment.
• Oversee RiskOps roadmap execution and manage dependencies.
• Facilitate planning events for maintaining risk awareness.
• Serve as the primary contact for government stakeholders.

Skills

Project Management Certification

Cybersecurity Framework Knowledge

GRC Familiarity

Data Analytics

Education

Master's degree

Bachelor's degree

Job description

Overview

Steampunk is seeking a Senior Project Manager to advance the Risk Operations (RiskOps) implementation for a large-scale federal cybersecurity and compliance program. You will drive program management activities across the Continuous Threat Exposure Management (CTEM) pipeline, the data lakehouse, and a multi-year security maturity roadmap. In this role, you will coordinate a cross-functional team of Risk Managers, Security Engineers, SecDevOps, AI, GRC Support, and Change Management specialists to keep workstreams aligned, and the RiskOps project moving from strategy to results.

Contributions

As a Senior Project Manager, you will lead project delivery in a government consulting environment, serving as client liaison, team coach, and mentor. You will also:

• Oversee RiskOps roadmap execution, driving phase transitions to completion and resolving key dependencies across maturity milestones.
• Maintain the master program schedule, backlog, and PI plans across all workstreams.
• Facilitate Scrum of Scrums, sprint planning, and PI planning events to maintain enterprise-wide risk awareness.
• Coordinate across Security Engineers, SecDevOps, AI, GRC Support, Change Management, and Service Design to keep delivery aligned.
• Identify and resolve dependencies, blockers, and integration risks across RiskOps and CTEM pipelines.
• Align technical delivery schedules with program milestones across data and automation workflows.
• Serve as the primary point of contact for government stakeholders and program leadership.
• Prepare and deliver status reports, risk registers, milestone dashboards, and executive briefings.
• Support recurring program cadences to maintain enterprise-wide awareness of risk posture and emerging capabilities.
• Maintain risk and issue logs; develop mitigation plans and elevate appropriately.
• Drive process improvements aligned with the security maturity roadmap, including compliance workflow automation and POA&M lifecycle management.
• Work with our change manager to implement an effective change management strategy to support the adoption of new tools, workflows, and operating model changes.
• Establish and track program data points, contract performance metrics, and KPIs.
• Maintain Security Playbooks, SOPs, and related program documentation as living references covering services, processes, tools, and governance.
• Work with the Program Manager and government to identify resourcing needs and manage financials for the RiskOps project.

Qualifications

Required

• Local to the Washington, DC Metro area; required to be onsite 1 day per week.
• Ability to obtain a U.S. government Public Trust security clearance.
• Master's degree in a related field and 7 years of relevant experience; OR Bachelor's degree and 10 years of relevant experience; OR 16 years of relevant experience without a degree.
• At least one active certification in project management: PMP, PRINCE2 Practitioner, PMI-ACP, CSM, or SAFeSPC (or equivalent).
• Experience supporting federal government IT programs within a national security agency environment.
• Familiarity with Governance, Risk, and Compliance (GRC), FISMA, FedRAMP, and continuous ATO (cATO) processes.
• Knowledge of cybersecurity frameworks including NIST 800-53, CTEM, and vulnerability management lifecycle.
• Familiarity with GRC tools.
• Experience managing programs with data analytics, dashboard development, or automation components.
• Familiarity with DevSecOps and the software factory concept.

About Steampunk

Steampunk relies on several factors to determine salary, including but not limited to geographic location, contractual requirements, education, knowledge, skills, competencies, and experience. The projected compensation range for this position is $150,000 to $190,000. The estimate displayed represents a typical annual salary range for this position. Annual salary is just one aspect of Steampunk’s total compensation package for employees. Learn more about additional Steampunk benefits here.

We are an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability status, protected veteran status, or any other characteristic protected by law. Steampunk participates in the E-Verify program.