{"schemaVersion":"jobsearcher.job.v1","id":"8988922afedb1a1eae337945","url":"https://jobsearcher.com/jobs/8988922afedb1a1eae337945","canonicalUrl":"https://jobsearcher.com/jobs/8988922afedb1a1eae337945","title":"Program Manager","description":"Company Overview\nDevelopment InfoStructure LLC., (Devis) is a leading provider of innovative software development, management, and consulting services, specializing in cutting-edge technologies such as DevSecOps, AI, and Machine Learning. With over 30 years of experience, we have established ourselves as a trusted partner for government agencies, delivering tailored, mission-critical solutions that drive digital transformation and operational excellence. Our client-centric approach, coupled with our deep domain expertise and technical prowess, enables us to forge enduring relationships and consistently deliver high-impact, adaptive solutions that resonate with the unique needs of the public sector.\n\nJob Overview\nThe Program Manager serves as the primary contractor-side lead for the NCATS CSS contract, responsible for contract administration, security compliance advisory, and Assessment and Authorization (A&A) coordination across all task areas. This is a senior individual contributor role with a scope that extends beyond traditional program management: the right candidate brings both the operational discipline to manage a federal task order and the technical depth to provide direct cybersecurity compliance and RMF support to the NCATS team.\n\nThis role will be a full-time position with work performed primarily onsite at the National Institute of Health (NIH) located at 9800 Medical Center Drive, Building B, Rockville, MD 20850. Core hours will be Monday-Friday: 8:00 AM - 6:00 PM EST, and after-hours support for emergency incidents will be required as needed by the client. Position is contingent upon award and client approval.\n\nPrimary Duties\n\nContract & Program Management\nServe as the primary contractor point of contact for the FPM and COR; support overall administration of the CSS contract and all task areas under it.\nDevelop and maintain program administration tools, including onboarding/offboarding tracking, staffing plans, org charts, and reporting dashboards with automated pipelines where applicable.\nCoordinate and communicate across all contractor staff and subcontractors; notify the CO and COR of any contract employee termination or resignation within five (5) business days.\nProvide periodic and ad-hoc reports related to contract execution, task status, and performance measures; support FPM quarterly briefings and data calls from NIH, HHS, and oversight bodies.\nManage risk through a risk registry and risk management plan; track open action items and drive issue resolution with contractor staff and Federal task leads.\nSupport the full task lifecycle, including requirements development, task initiation, execution oversight, and closeout in coordination with FTLs.\n\nSecurity Compliance & Program Support\nSupport FISMA compliance across NCATS information systems by advising project teams on NIST SP 800-53 Rev 5 control implementation throughout the SDLC.\nDevelop and maintain compliance documentation, including written technical guidance, control implementation review summaries, and data call responses for NIH ISRM, HHS, and OMB requirements.\nMaintain a centralized knowledge management repository covering SOPs, security artifacts, process documentation, and training materials for contract staff and NCATS stakeholders.\nCoordinate and deliver security training and awareness activities for NCATS staff, system owners, and project teams; develop written materials, job aids, and reference guides in support of training programs.\nMonitor evolving federal security policy (Zero Trust, OMB M-21-31, HHS ARS, NIH ISRM) and update internal guidance and training content accordingly.\nSupport collaborative problem-solving between contractor staff and Government stakeholders; facilitate knowledge transfer to maintain continuity of service during transitions.\nAssessment & Authorization Support\nGuide system developers, engineers, and project stakeholders through NIST RMF phases (Prepare, Categorize, Select, Implement, Assess, Authorize, Monitor) for NCATS information systems.\nDevelop, maintain, and refine core RMF artifacts in accordance with NIH templates and HHS ARS requirements:\nSystem Security Plan (SSP) and supporting artifacts\nSecurity Assessment Plan (SAP) and Security Assessment Report (SAR)\nPlan of Action and Milestones (POA&M)\nContinuous Monitoring Strategy\nPrivacy Impact Assessment (PIA) support documents\nProduce and maintain FIPS-199 system categorization packages, control baseline tailoring documentation, and control mapping matrices (system functions to NIST 800-53 Rev 5 controls).\nCoordinate with system owners and the NCATS security team to prepare and submit ATO packages; support FedRAMP compliance where applicable.\nProvide privacy control implementation support, including data flow diagrams with integrated privacy requirements and data call responses for HHS/NIH privacy compliance.\nIntegrate A&A advisory support into each SDLC phase; produce written recommendations and control implementation guidance per development iteration.\nStakeholder Engagement & Deliverables\nEstablish and maintain stakeholder engagement processes for contractor deliverables; manage routing and acceptance cycles with the NCATS Branch Chief, Federal leads, CO, and COR.\nTrack Government review timelines; manage resubmission timelines and communicate status proactively to Federal leads.\nDevelop and maintain SOPs supporting federally mandated cybersecurity and privacy policies; ensure SOPs remain current with applicable NIH and HHS policy changes.\nRespond to data calls and security inquiries from NCATS, NIH, HHS, and other oversight bodies in coordination with the Federal Program Manager.\nRequired Qualifications\n\nEducation and Experience\nMinimum ten (10) years of progressively responsible program or project management experience, including at least five (5) years leading federal IT or cybersecurity programs with multiple stakeholders and cross-functional delivery teams.\nMinimum five (5) years of hands-on experience with FISMA compliance, NIST RMF, and federal security documentation (SSP, POA&M, SAR, PIA) in a civilian federal agency environment.\nBachelor’s degree in Information Technology, Cybersecurity, Business, or a related discipline required; in lieu of a degree, fourteen (14) years of progressively responsible experience as described above.\n\nCertifications\nPMP (Project Management Professional) – Active, required.\nCISM (Certified Information Security Manager), CISSP (Certified Information Systems Security Professional), or CAP (Certified Authorization Professional) – at least one required.\n\nCore Competencies\nDemonstrated ability to manage contractor-side program execution, including staffing oversight, deliverable management, and FPM/COR coordination on a federal task order.\nWorking knowledge of HHS/NIH security policy, including HHS ARS, NIH ISRM policies, and OMB M-21-31 logging and auditability requirements.\nExperience developing and maintaining NIST RMF documentation packages for civilian federal systems; familiarity with NIH RMF templates is a plus.\nAbility to communicate technical compliance requirements clearly to non-technical stakeholders, including written briefings, training materials, and executive summaries.\nDemonstrated experience operating in a multi-task contract environment where competing priorities must be managed concurrently.\n\nPreferred Qualifications\nMaster’s degree in Information Technology, Cybersecurity, or a related discipline.\nPrior experience supporting HHS, NIH, or NCATS programs, or other biomedical research agencies with complex IT security environments.\nFamiliarity with FedRAMP authorization processes and cloud security requirements for federal systems.\nExperience producing FIPS-199 categorization packages and supporting ATO submissions in a civilian HHS/NIH environment.\nExperience with federal security training development and delivery, including role-based training programs under HHS policy.\nClearance\nMust be able to obtain and maintain the applicable NIH/HHS Public Trust or clearance level prior to beginning work.\nMust complete all required HHS/NIH Contractor Information Security Awareness, Privacy, and Records Management training before performing work under the contract, and annually thereafter.\nMust comply with NIH Rules of Behavior for contractors and sign the applicable acknowledgment before accessing any Government data, systems, or networks.\n\nSalary Range\n$145,000 - $160,000\nDevis is an AA/EOE/M/F/Disabled/VET Employer committed to providing equal employment opportunity without regard to an individual’s race, color, religion, age, gender, sexual orientation, veteran status, national origin or disability.\nXkat5rEZBC","company":"Developmentinfostructure","rawCompany":"developmentinfostructure","city":"Derwood","state":"MD","isRemote":false,"isActive":false,"createdAt":"2026-04-14T11:19:57.408Z","occupations":[{"code":"13-1082.00","title":"Project Management Specialists","slug":"project-management-specialists"},{"code":"11-9151.00","title":"Social and Community Service Managers","slug":"social-and-community-service-managers"},{"code":"15-1299.09","title":"Information Technology Project Managers","slug":"information-technology-project-managers"}],"industries":[{"code":"541512","title":"Computer Systems Design Services","slug":"computer-systems-design-services"},{"code":"541618","title":"Other Management Consulting Services","slug":"other-management-consulting-services"},{"code":"541690","title":"Other Scientific and Technical Consulting Services","slug":"other-scientific-and-technical-consulting-services"}],"jobPosting":{"@context":"https://schema.org","@type":"JobPosting","title":"Program Manager","description":"Company Overview\nDevelopment InfoStructure LLC., (Devis) is a leading provider of innovative software development, management, and consulting services, specializing in cutting-edge technologies such as DevSecOps, AI, and Machine Learning. With over 30 years of experience, we have established ourselves as a trusted partner for government agencies, delivering tailored, mission-critical solutions that drive digital transformation and operational excellence. Our client-centric approach, coupled with our deep domain expertise and technical prowess, enables us to forge enduring relationships and consistently deliver high-impact, adaptive solutions that resonate with the unique needs of the public sector.\n\nJob Overview\nThe Program Manager serves as the primary contractor-side lead for the NCATS CSS contract, responsible for contract administration, security compliance advisory, and Assessment and Authorization (A&A) coordination across all task areas. This is a senior individual contributor role with a scope that extends beyond traditional program management: the right candidate brings both the operational discipline to manage a federal task order and the technical depth to provide direct cybersecurity compliance and RMF support to the NCATS team.\n\nThis role will be a full-time position with work performed primarily onsite at the National Institute of Health (NIH) located at 9800 Medical Center Drive, Building B, Rockville, MD 20850. Core hours will be Monday-Friday: 8:00 AM - 6:00 PM EST, and after-hours support for emergency incidents will be required as needed by the client. Position is contingent upon award and client approval.\n\nPrimary Duties\n\nContract & Program Management\nServe as the primary contractor point of contact for the FPM and COR; support overall administration of the CSS contract and all task areas under it.\nDevelop and maintain program administration tools, including onboarding/offboarding tracking, staffing plans, org charts, and reporting dashboards with automated pipelines where applicable.\nCoordinate and communicate across all contractor staff and subcontractors; notify the CO and COR of any contract employee termination or resignation within five (5) business days.\nProvide periodic and ad-hoc reports related to contract execution, task status, and performance measures; support FPM quarterly briefings and data calls from NIH, HHS, and oversight bodies.\nManage risk through a risk registry and risk management plan; track open action items and drive issue resolution with contractor staff and Federal task leads.\nSupport the full task lifecycle, including requirements development, task initiation, execution oversight, and closeout in coordination with FTLs.\n\nSecurity Compliance & Program Support\nSupport FISMA compliance across NCATS information systems by advising project teams on NIST SP 800-53 Rev 5 control implementation throughout the SDLC.\nDevelop and maintain compliance documentation, including written technical guidance, control implementation review summaries, and data call responses for NIH ISRM, HHS, and OMB requirements.\nMaintain a centralized knowledge management repository covering SOPs, security artifacts, process documentation, and training materials for contract staff and NCATS stakeholders.\nCoordinate and deliver security training and awareness activities for NCATS staff, system owners, and project teams; develop written materials, job aids, and reference guides in support of training programs.\nMonitor evolving federal security policy (Zero Trust, OMB M-21-31, HHS ARS, NIH ISRM) and update internal guidance and training content accordingly.\nSupport collaborative problem-solving between contractor staff and Government stakeholders; facilitate knowledge transfer to maintain continuity of service during transitions.\nAssessment & Authorization Support\nGuide system developers, engineers, and project stakeholders through NIST RMF phases (Prepare, Categorize, Select, Implement, Assess, Authorize, Monitor) for NCATS information systems.\nDevelop, maintain, and refine core RMF artifacts in accordance with NIH templates and HHS ARS requirements:\nSystem Security Plan (SSP) and supporting artifacts\nSecurity Assessment Plan (SAP) and Security Assessment Report (SAR)\nPlan of Action and Milestones (POA&M)\nContinuous Monitoring Strategy\nPrivacy Impact Assessment (PIA) support documents\nProduce and maintain FIPS-199 system categorization packages, control baseline tailoring documentation, and control mapping matrices (system functions to NIST 800-53 Rev 5 controls).\nCoordinate with system owners and the NCATS security team to prepare and submit ATO packages; support FedRAMP compliance where applicable.\nProvide privacy control implementation support, including data flow diagrams with integrated privacy requirements and data call responses for HHS/NIH privacy compliance.\nIntegrate A&A advisory support into each SDLC phase; produce written recommendations and control implementation guidance per development iteration.\nStakeholder Engagement & Deliverables\nEstablish and maintain stakeholder engagement processes for contractor deliverables; manage routing and acceptance cycles with the NCATS Branch Chief, Federal leads, CO, and COR.\nTrack Government review timelines; manage resubmission timelines and communicate status proactively to Federal leads.\nDevelop and maintain SOPs supporting federally mandated cybersecurity and privacy policies; ensure SOPs remain current with applicable NIH and HHS policy changes.\nRespond to data calls and security inquiries from NCATS, NIH, HHS, and other oversight bodies in coordination with the Federal Program Manager.\nRequired Qualifications\n\nEducation and Experience\nMinimum ten (10) years of progressively responsible program or project management experience, including at least five (5) years leading federal IT or cybersecurity programs with multiple stakeholders and cross-functional delivery teams.\nMinimum five (5) years of hands-on experience with FISMA compliance, NIST RMF, and federal security documentation (SSP, POA&M, SAR, PIA) in a civilian federal agency environment.\nBachelor’s degree in Information Technology, Cybersecurity, Business, or a related discipline required; in lieu of a degree, fourteen (14) years of progressively responsible experience as described above.\n\nCertifications\nPMP (Project Management Professional) – Active, required.\nCISM (Certified Information Security Manager), CISSP (Certified Information Systems Security Professional), or CAP (Certified Authorization Professional) – at least one required.\n\nCore Competencies\nDemonstrated ability to manage contractor-side program execution, including staffing oversight, deliverable management, and FPM/COR coordination on a federal task order.\nWorking knowledge of HHS/NIH security policy, including HHS ARS, NIH ISRM policies, and OMB M-21-31 logging and auditability requirements.\nExperience developing and maintaining NIST RMF documentation packages for civilian federal systems; familiarity with NIH RMF templates is a plus.\nAbility to communicate technical compliance requirements clearly to non-technical stakeholders, including written briefings, training materials, and executive summaries.\nDemonstrated experience operating in a multi-task contract environment where competing priorities must be managed concurrently.\n\nPreferred Qualifications\nMaster’s degree in Information Technology, Cybersecurity, or a related discipline.\nPrior experience supporting HHS, NIH, or NCATS programs, or other biomedical research agencies with complex IT security environments.\nFamiliarity with FedRAMP authorization processes and cloud security requirements for federal systems.\nExperience producing FIPS-199 categorization packages and supporting ATO submissions in a civilian HHS/NIH environment.\nExperience with federal security training development and delivery, including role-based training programs under HHS policy.\nClearance\nMust be able to obtain and maintain the applicable NIH/HHS Public Trust or clearance level prior to beginning work.\nMust complete all required HHS/NIH Contractor Information Security Awareness, Privacy, and Records Management training before performing work under the contract, and annually thereafter.\nMust comply with NIH Rules of Behavior for contractors and sign the applicable acknowledgment before accessing any Government data, systems, or networks.\n\nSalary Range\n$145,000 - $160,000\nDevis is an AA/EOE/M/F/Disabled/VET Employer committed to providing equal employment opportunity without regard to an individual’s race, color, religion, age, gender, sexual orientation, veteran status, national origin or disability.\nXkat5rEZBC","datePosted":"2026-04-14T11:19:57.408Z","dateModified":"2026-04-14T11:19:57.408Z","hiringOrganization":{"@type":"Organization","name":"Developmentinfostructure","sameAs":"https://jobsearcher.com"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Derwood","addressRegion":"MD","addressCountry":"US"}},"identifier":{"@type":"PropertyValue","name":"JobSearcher","value":"8988922afedb1a1eae337945"},"url":"https://jobsearcher.com/jobs/8988922afedb1a1eae337945"}}