Continuity of Ops (COOP) & Contingency Planning Specialist

TRIPLE POINT SECURITY INCORPORATED • Leesburg, VA

6d • Remote

About The Position

Triple Point Security is seeking a Continuity of Operations (COOP) and Contingency Planning Specialist to support continuity, contingency, and business impact analysis activities across our federal client engagements, with a primary focus on a large NIH cybersecurity program. Working within a team of cybersecurity and Governance, Risk, and Compliance (GRC) professionals, the specialist will develop, maintain, and test Business Impact Analyses (BIAs), contingency plans, and COOP documentation in accordance with NIST SP 800-34, and will support recovery planning for mission-critical federal systems. Because the role sits within an integrated Risk Management Framework (RMF) team, familiarity with security authorization and continuous monitoring is valued. This position is well-suited for a detail-oriented professional with hands-on continuity and contingency planning experience, strong communication skills, and an interest in growing within a specialized, fast-moving cybersecurity consulting firm.

Requirements

• Bachelor's degree in Cybersecurity, Information Systems, Information Technology, Emergency Management, Computer Science, or a related field, or an equivalent combination of education and experience.
• 4 to 7 years of experience in continuity of operations, contingency planning, business impact analysis, information security, or risk management.
• Demonstrated experience developing and maintaining Business Impact Analyses (BIAs), including system criticality tiering and recovery metrics such as Recovery Time Objective (RTO), Recovery Point Objective (RPO), and Maximum Tolerable Downtime (MTD).
• Experience developing, maintaining, and testing Contingency Plans and COOP artifacts in accordance with NIST SP 800-34.
• Experience planning and facilitating contingency plan tests and tabletop exercises, and documenting results and after-action corrective actions.
• Working knowledge of the Authorization to Operate (ATO) process and the Risk Management Framework (RMF), including how the Contingency Planning (CP) control family fits within security authorization and continuous monitoring.
• Strong understanding of NIST SP 800-53 (particularly CP controls), FISMA, and federal information security and continuity requirements.
• Ability to interpret system criticality and recovery requirements and to communicate gaps, risks, and recommendations to both technical and non-technical stakeholders.
• Experience collaborating with system owners, ISSOs, security teams, and program stakeholders to develop and validate continuity documentation.
• Strong written and verbal communication skills, including the ability to produce clear, audit-ready documentation.
• Must be a U.S. citizen and able to obtain and maintain a federal Public Trust or suitability determination.

Nice To Haves

• Continuity-specific certification such as FEMA Professional Continuity Practitioner (PCP), DRI Certified Business Continuity Professional (CBCP) or Associate (ABCP), or similar.
• Familiarity with federal continuity guidance, including Federal Continuity Directive 1 (FCD-1) and NIST SP 800-34.
• Experience supporting federal ATO packages and validating supporting artifacts such as contingency plans, BIAs, policies, procedures, and system inventories.
• Understanding of cloud continuity and disaster recovery considerations in AWS, Azure, or GCP, including backup and recovery and how cloud services affect control inheritance and responsibility models.
• Experience with governance, risk, and compliance tools or authorization repositories used to manage security and continuity artifacts.
• Experience working within or supporting federal agencies, federally funded programs, or federal health environments (for example, HHS or NIH).
• Relevant certifications such as CISSP, CISM, CGRC, or Security+.

Responsibilities

• Develop, maintain, and test Business Impact Analyses (BIAs), contingency plans, and COOP documentation for federal systems in accordance with NIST SP 800-34.
• Define and apply consistent BIA metrics, including criticality tiers, RTO, RPO, and MTD, so continuity planning rests on comparable, decision-ready inputs across systems.
• Plan, facilitate, and document contingency plan tests, tabletop exercises, and training, and track lessons learned and corrective actions to closure.
• Support recovery planning for mission-critical systems and align continuity activities with federal, agency, and NIST requirements.
• Support ATO and continuous monitoring activities as they relate to contingency planning, including evidence collection, control validation, and artifact maintenance.
• Collaborate with system owners, ISSOs, program staff, and project managers to implement continuity and contingency requirements.
• Provide program and operational support, including status reporting and stakeholder coordination, across the engagement.
• Communicate continuity and recovery information effectively to technical, operational, and leadership audiences through clear written and verbal communication.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level