Project Manager - Continuity and Resilience

SkyePoint Decisions•Bethesda, MD

2d•Remote

About The Position

SkyePoint Decisions is seeking a Research Application Services (RAS) Continuity and Resilience Project Manager to be responsible for leading and coordinating cybersecurity, continuity, contingency planning, and operational resilience activities supporting NIH Research Application Services (RAS) environments. This role serves as the primary liaison between program leadership, cybersecurity teams, system owners, researchers, technical staff, and Government stakeholders to ensure critical research systems remain secure, compliant, operational, and resilient during cyber incidents, system outages, and other disruptive events. The position oversees project planning, continuity and contingency planning activities, business impact analyses (BIAs), stakeholder coordination, risk management, recovery planning, and compliance initiatives. Working closely with RMF, Governance, Risk & Compliance (GRC), Vulnerability Management, Incident Response, Infrastructure, and Technical Operations teams, the Project Manager ensures NIH research applications meet Federal cybersecurity requirements while maintaining operational continuity and recovery readiness. This position is a fully remote position.

Requirements

Bachelor's degree in Cybersecurity, Information Systems, Computer Science, Business Administration, Emergency Management, Project Management, Information Assurance, or a related field.
Minimum 5 years of experience supporting Federal cybersecurity, continuity planning, disaster recovery, operational resilience, or IT program management initiatives.
Must be familiar with: NIST Risk Management Framework (SP 800-37)
NIST SP 800-34 (Contingency Planning)
NIST SP 800-53 Rev. 5
FISMA Federal continuity planning requirements
Federal cybersecurity compliance frameworks
IT governance, operations, and recovery processes
Experience managing multiple projects, workstreams, or operational initiatives within Federal IT environments.
Experience conducting Business Impact Analyses (BIAs) and developing continuity and recovery planning documentation.
Experience coordinating cross-functional teams and stakeholders supporting cybersecurity, compliance, and operational resilience activities.
Knowledge of project management methodologies, risk management practices, and performance reporting.
Strong organizational, communication, and stakeholder management skills.
U.S. Citizenship required.
Ability to obtain and maintain an NIH Public Trust.

Nice To Haves

PMP, CAPM, CISSP, CISM, CBCP, MBCP, or similar project management, cybersecurity, or business continuity certification.
Experience supporting NIH, HHS, or other Federal civilian agencies.
Experience supporting research, scientific, healthcare, or mission-critical environments.
Experience coordinating continuity, disaster recovery, and cybersecurity compliance activities within RMF-based programs.

Responsibilities

Manage day-to-day coordination of cybersecurity, continuity, and operational resilience activities supporting NIH Research Application Services (RAS).
Develop and maintain Integrated Master Schedules (IMS), project schedules, milestones, deliverables, dependencies, and resource plans.
Coordinate activities across cybersecurity, infrastructure, application, business, and research stakeholder teams.
Facilitate status meetings, stakeholder briefings, governance reviews, and action-item tracking.
Monitor project performance and ensure activities remain aligned with NIH objectives and program priorities.
Maintain action, risk, issue, and dependency register and track risks, issues, decisions, dependencies, and corrective actions through resolution.
Ensure cybersecurity, continuity, and resilience activities are integrated into overall program management processes.
Support cybersecurity stakeholder inquiries and operational coordination activities.
Support knowledge management repositories, templates, SOPs, playbooks, and training materials.
Support monthly reporting and KPI dashboard development
Serve as the primary coordinator supporting NIH Researcher Auth Service (RAS) initiatives and BioData Catalyst operational cybersecurity activities.
Coordinate with NIH Center for Information Technology (CIT), BioData Catalyst teams, system owners, cybersecurity personnel, and NHLBI stakeholders.
Support NIH Controlled Access Data Repository (CADR) compliance activities.
Track RAS-related risks, dependencies, milestones, corrective actions, and compliance requirements.
Coordinate authorization package updates, continuous monitoring activities, documentation reviews, and audit-readiness efforts associated with RAS-supported systems.
Support evolving NIH RAS requirements and integration activities as NIH enterprise RAS capabilities mature.
Develop executive reports, status updates, and governance materials supporting RAS initiatives.
Develop, maintain, and update Continuity of Operations Plans (COOPs), Information System Contingency Plans (ISCPs), Disaster Recovery Plans (DRPs), and related recovery documentation.
Support operational resilience initiatives across NIH research systems, applications, and supporting infrastructure.
Identify critical business functions, mission dependencies, and recovery priorities.
Ensure continuity and recovery requirements are incorporated into cybersecurity and operational planning activities.
Coordinate continuity planning efforts among technical teams, system owners, and business stakeholders.
Assess potential operational impacts associated with system disruptions, cyber incidents, and service outages.
Support cybersecurity planning activities associated with system retirement and decommissioning efforts.
Coordinate decommissioning plans, stakeholder communications, dependency analysis, inventory updates, and closure documentation.
Support secure disposition activities consistent with NIST SP 800-88 guidance.
Coordinate continuity impacts associated with system retirement efforts
Conduct and maintain Business Impact Analyses (BIAs) to identify critical processes, dependencies, and recovery requirements.
Define and document Recovery Time Objectives (RTOs) and Recovery Point Objectives (RPOs).
Maintain BIA documentation, recovery analyses, and continuity planning artifacts.
Develop recommendations to strengthen resilience, recovery readiness, and mission continuity capabilities.
Ensure continuity planning documentation aligns with NIH, HHS, and Federal requirements.
Coordinate with RMF, Assessment & Authorization (A&A), GRC, Vulnerability Management, Threat Detection, Incident Response, and Technical Operations teams.
Support NIST Risk Management Framework (RMF) activities associated with contingency planning and operational resilience controls.
Assist in the development and maintenance of authorization package artifacts related to continuity and contingency planning requirements.
Ensure cybersecurity findings, risks, remediation efforts, and compliance activities are tracked and reported.
Support planning and execution of cybersecurity initiatives impacting NIH research environments.
Ensure compliance with Federal cybersecurity mandates, governance processes, and operational requirements.
Plan, coordinate, and document contingency plan testing, disaster recovery exercises, and continuity assessments.
Support tabletop exercises, recovery testing events, and after-action review activities.
Track corrective actions resulting from exercises, audits, assessments, and testing activities.
Develop executive-level reports, metrics, and status updates related to project performance, continuity readiness, and cybersecurity posture.
Ensure continuity and cybersecurity activities are accurately reflected in reporting mechanisms, governance processes, and program documentation.

Benefits

certification incentive program
PTO
floating federal holiday options
several insurance options including HMO and High Deductible plans with Health Savings Accounts [HSAs]
Flex Spending Accounts [FSAs]
Full Dental Plans
Vision
ST/LT Disability
Life Insurance
401k matched