Experienced Cybersecurity Manager

To apply, please send your resume to hr@bm-cyber.com with the subject line “Experienced Cybersecurity Manager Application”.

B&M Cyber is seeking an experienced Cybersecurity Manager to lead cybersecurity programs, personnel, and activities supporting our Federal clients. The successful candidate will serve as the primary point of contact for the Government and be accountable for overall contract performance, including cost, schedule, staffing, quality, technical and compliance activities, and the delivery of high-quality cybersecurity services. The ideal candidate has strong program management, cybersecurity, and personnel management experience, sound judgment, and the ability to communicate effectively with technical teams, client stakeholders, and senior leadership.

Candidates must be able to obtain a security clearance and be willing to work onsite at Federal client locations in Washington, D.C. or Northern Virginia five (5) days per week. Occasional travel to other client locations may be required. This position is contingent upon satisfaction of all applicable security requirements.

Responsibilities

• Serve as the primary point of contact for the Contracting Officer (CO), Contracting Officer’s Representative (COR), and client leadership, and be accountable for overall contract performance, including cost, schedule, quality, staffing, and customer satisfaction.

• Plan and manage program and project execution using Project Management Institute (PMI) Project Management Body of Knowledge (PMBOK) practices, including project management plans, integrated schedules, level-of-effort and resource estimates, and risk, communications, and quality management.

• Lead cybersecurity personnel, assign work, monitor performance, and ensure responsibilities are completed accurately and on schedule.

• Oversee cybersecurity activities across multiple task areas (e.g., assessment and authorization, ISSO and ISSM support, vulnerability management and penetration testing, security operations, ICAM, and Zero Trust) involving enterprise systems, networks, applications, cloud platforms, and identity environments.

• Coordinate security assessments, vulnerability management, remediation, continuous monitoring, incident response, and compliance activities.

• Support Risk Management Framework (RMF), Assessment and Authorization (A&A), audit, and ongoing authorization initiatives.

• Track and report compliance with Federal cyber mandates (e.g., Executive Orders, OMB memoranda, CISA directives, and Department-level cyber taskings), and develop cybersecurity metrics, dashboards, and FISMA scorecard reporting for client leadership.

• Implement quality control processes and review technical findings, security documentation, reports, and deliverables for quality, completeness, and compliance before submission to the Government.

• Monitor project requirements, staffing, schedules, risks, issues, dependencies, and performance metrics, and actively manage risks and issues to close technical and programmatic gaps.

• Identify and escalate cybersecurity risks, performance concerns, resource needs, and potential impacts to the client.

• Develop and maintain cybersecurity plans, policies, procedures, schedules, reports, and management briefings.

• Coordinate with Federal stakeholders, system owners, cybersecurity personnel, engineers, and other project teams.

• Communicate technical risks, priorities, recommendations, and project status to technical and non-technical audiences.

• Mentor team members, provide constructive feedback, and support employee development and cross-training.

• Promote consistent processes, accountability, collaboration, continuous improvement, and exceptional client service.

Qualifications

• At least ten (10) years of experience managing IT or IT security projects and programs, including at least five (5) years managing projects with responsibility for cost, schedule, and performance.

• At least five (5) years of experience in cybersecurity compliance, information assurance, security assessments, or related Federal cybersecurity work.

• Current Project Management Professional (PMP) certification from the Project Management Institute (PMI).

• Current Certified Information Systems Security Professional (CISSP) or Certified Information Security Manager (CISM) certification.

• Demonstrated experience with and knowledge of FISMA, the NIST Cybersecurity Framework (CSF), the NIST Risk Management Framework (RMF), applicable NIST security standards (e.g., NIST SP 800-37 and SP 800-53), and DHS 4300A.

• Strong analytical, technical writing, documentation, and client communication skills.

• Ability to work independently and as part of a team in a sensitive Federal environment.

Preferred Qualifications

• Active Top Secret security clearance.

• Bachelor’s degree or higher in Cybersecurity or a related field.

• Experience supporting Federal, law enforcement, defense, intelligence community, or similarly sensitive environments.

• Experience conducting RMF, A&A, security assessment, continuous monitoring, audit, and remediation activities.

• Experience with Federal governance, risk, and compliance (GRC), vulnerability management, continuous monitoring, or reporting tools (e.g., Tenable, Splunk, CDM dashboards, and Power BI).

• Additional relevant cybersecurity or leadership certifications.

Security and Clearance Requirements  

Applicants selected will be subject to a security investigation. Final placement is contingent upon obtaining and maintaining the required eligibility and receiving Government approval. U.S. citizenship is required for this position in accordance with Federal requirements. 

Equal Opportunity Employer 

B&M Cyber is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, religion, sex, sexual orientation, gender identity, national origin, age, disability or protected veteran status, or any other legally protected basis, in accordance with applicable law. 

About Us 

B&M Cyber (B&M Consulting Group, Inc.) is a woman-owned small business (WOSB) with significant expertise and experience providing cybersecurity services to clients throughout the Federal government. We value collaboration, innovation, and continuous growth. Our employees work closely across corporate and client teams in a consulting environment to solve challenges and provide exceptional service. We foster a supportive environment where team members can share ideas, build new skills, and pursue the areas they are passionate about. 

Equal Opportunity Employer:

B&M Cyber is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability or protected veteran status, or any other legally protected basis, in accordance with applicable law.