Cybersecurity Program Manager - TS/SCI

Spry Methods•Linthicum, MD

About The Position

Spry Methods is seeking a Cybersecurity Program Manager to provide leadership and oversight for personnel supporting enterprise information technology and cybersecurity operations. This key personnel position will serve as a primary contractor point of contact, coordinate work across technical teams, and ensure activities are completed efficiently and in accordance with program requirements. The Task Lead will support IT strategy, workforce planning, budgeting, investment management, cybersecurity, privacy, and digital accessibility. The position will also oversee cybersecurity compliance, risk assessments, vulnerability testing, security audits, incident response coordination, and third-party security vendors.

Requirements

TS/SCI clearance eligibility
At least five years of experience in IT leadership and accountability, including responsibility for implementing IT management functions.
At least five years of experience in IT strategic planning.
At least five years of experience assessing IT workforce requirements and developing workforce strategies and plans.
At least five years of experience supporting annual and multiyear IT planning, programming, and budgeting.
At least five years of experience managing, evaluating, or assessing IT investments and resources.
At least five years of experience establishing, implementing, or supporting compliance with an organization-wide information security and privacy program.
At least five years of experience supporting digital accessibility of information and communications technologies.
Experience implementing cybersecurity frameworks such as NIST, ISO 27001, or CMMC.
Experience overseeing cybersecurity risk assessments, vulnerability testing, security audits, or corrective-action activities.
Experience coordinating work across multiple technical teams and managing dependencies, staffing, schedules, and resource conflicts.
Experience supporting incident or crisis-response activities involving detection, containment, recovery, and stakeholder communications.
Experience managing third-party technology or cybersecurity vendors.
Strong written and verbal communication skills, including the ability to brief Government and executive stakeholders

Nice To Haves

Support of DoD, Intelligence Community, or other Federal IT and cybersecurity programs preferred.
Familiarity with DoD Risk Management Framework, ATO or continuous ATO processes, NIST SP 800-53, DoD 8140 workforce requirements, DevSecOps, and enterprise cybersecurity operations preferred.

Responsibilities

Provide management and oversight of assigned contractor and subcontractor personnel.
Serve as a primary contractor point of contact for CODE activities.
Facilitate communication and coordination between Government stakeholders and contractor teams.
Track requirements, technical activities, risks, decisions, schedules, and performance using established management practices.
Ensure the quality and efficiency of contractor performance and compliance with program requirements.
Coordinate tasks and dependencies across project teams to prevent resource conflicts.
Support IT strategic planning, workforce planning, budgeting, investment management, and organizational accountability.
Implement and maintain cybersecurity compliance frameworks such as NIST, ISO 27001, or CMMC.
Oversee cybersecurity risk assessments and vulnerability testing to identify and mitigate emerging threats.
Coordinate internal and external security audits and track corrective actions.
Lead contractor crisis-response activities during significant security incidents, including detection, containment, recovery, and stakeholder coordination.
Oversee third-party security vendors and support evaluation of acquisitions against applicable security requirements.
Support agency-wide information security, privacy, digital accessibility, and cybersecurity education initiatives.
Assist with applicable financial and business processes without performing inherently governmental functions.
Make binding decisions for the contractor organization and proactively communicate technical, contractual, programmatic, personnel, and resource risks.