SkyePoint Decisions is a leading Cybersecurity Architecture and Engineering, Critical Infrastructure and Operations, and Applications Development and Maintenance IT service provider headquartered in Dulles, Virginia with operations across the U.S. We provide innovative enterprise-wide solutions as well as targeted services addressing the complex challenges faced by our federal government clients. Our focus is on enabling our clients to deliver their mission most efficiently and effectively – anytime, anywhere, securely. We combine technical expertise, mission awareness, and an empowered workforce to produce meaningful results.
This is a contingent position based on contract win.
SkyePoint Decisions is seeking a Research Application Services (RAS) Continuity and Resilience Project Manager to be responsible for leading and coordinating cybersecurity, continuity, contingency planning, and operational resilience activities supporting NIH Research Application Services (RAS) environments. This role serves as the primary liaison between program leadership, cybersecurity teams, system owners, researchers, technical staff, and Government stakeholders to ensure critical research systems remain secure, compliant, operational, and resilient during cyber incidents, system outages, and other disruptive events.
The position oversees project planning, continuity and contingency planning activities, business impact analyses (BIAs), stakeholder coordination, risk management, recovery planning, and compliance initiatives. Working closely with RMF, Governance, Risk & Compliance (GRC), Vulnerability Management, Incident Response, Infrastructure, and Technical Operations teams, the Project Manager ensures NIH research applications meet Federal cybersecurity requirements while maintaining operational continuity and recovery readiness.
This position is a fully remote position.
Responsibilities:
Program & Project Management
- Manage day-to-day coordination of cybersecurity, continuity, and operational resilience activities supporting NIH Research Application Services (RAS).
- Develop and maintain Integrated Master Schedules (IMS), project schedules, milestones, deliverables, dependencies, and resource plans.
- Coordinate activities across cybersecurity, infrastructure, application, business, and research stakeholder teams.
- Facilitate status meetings, stakeholder briefings, governance reviews, and action-item tracking.
- Monitor project performance and ensure activities remain aligned with NIH objectives and program priorities.
- Maintain action, risk, issue, and dependency register and track risks, issues, decisions, dependencies, and corrective actions through resolution.
- Ensure cybersecurity, continuity, and resilience activities are integrated into overall program management processes.
- Support cybersecurity stakeholder inquiries and operational coordination activities.
- Support knowledge management repositories, templates, SOPs, playbooks, and training materials.
- Support monthly reporting and KPI dashboard development
Research Application Services (RAS) Program Support
- Serve as the primary coordinator supporting NIH Researcher Auth Service (RAS) initiatives and BioData Catalyst operational cybersecurity activities.
- Coordinate with NIH Center for Information Technology (CIT), BioData Catalyst teams, system owners, cybersecurity personnel, and NHLBI stakeholders.
- Support NIH Controlled Access Data Repository (CADR) compliance activities.
- Track RAS-related risks, dependencies, milestones, corrective actions, and compliance requirements.
- Coordinate authorization package updates, continuous monitoring activities, documentation reviews, and audit-readiness efforts associated with RAS-supported systems.
- Support evolving NIH RAS requirements and integration activities as NIH enterprise RAS capabilities mature.
- Develop executive reports, status updates, and governance materials supporting RAS initiatives.
Continuity & Contingency Planning
- Develop, maintain, and update Continuity of Operations Plans (COOPs), Information System Contingency Plans (ISCPs), Disaster Recovery Plans (DRPs), and related recovery documentation.
- Support operational resilience initiatives across NIH research systems, applications, and supporting infrastructure.
- Identify critical business functions, mission dependencies, and recovery priorities.
- Ensure continuity and recovery requirements are incorporated into cybersecurity and operational planning activities.
- Coordinate continuity planning efforts among technical teams, system owners, and business stakeholders.
- Assess potential operational impacts associated with system disruptions, cyber incidents, and service outages.
- Support cybersecurity planning activities associated with system retirement and decommissioning efforts.
- Coordinate decommissioning plans, stakeholder communications, dependency analysis, inventory updates, and closure documentation.
- Support secure disposition activities consistent with NIST SP 800-88 guidance.
- Coordinate continuity impacts associated with system retirement efforts
Business Impact Analysis & Recovery Planning
- Conduct and maintain Business Impact Analyses (BIAs) to identify critical processes, dependencies, and recovery requirements.
- Define and document Recovery Time Objectives (RTOs) and Recovery Point Objectives (RPOs).
- Maintain BIA documentation, recovery analyses, and continuity planning artifacts.
- Develop recommendations to strengthen resilience, recovery readiness, and mission continuity capabilities.
- Ensure continuity planning documentation aligns with NIH, HHS, and Federal requirements.
Cybersecurity & Compliance Support
- Coordinate with RMF, Assessment & Authorization (A&A), GRC, Vulnerability Management, Threat Detection, Incident Response, and Technical Operations teams.
- Support NIST Risk Management Framework (RMF) activities associated with contingency planning and operational resilience controls.
- Assist in the development and maintenance of authorization package artifacts related to continuity and contingency planning requirements.
- Ensure cybersecurity findings, risks, remediation efforts, and compliance activities are tracked and reported.
- Support planning and execution of cybersecurity initiatives impacting NIH research environments.
- Ensure compliance with Federal cybersecurity mandates, governance processes, and operational requirements.
Testing, Exercises & Reporting
-
- Plan, coordinate, and document contingency plan testing, disaster recovery exercises, and continuity assessments.
- Support tabletop exercises, recovery testing events, and after-action review activities.
- Track corrective actions resulting from exercises, audits, assessments, and testing activities.
- Develop executive-level reports, metrics, and status updates related to project performance, continuity readiness, and cybersecurity posture.
- Ensure continuity and cybersecurity activities are accurately reflected in reporting mechanisms, governance processes, and program documentation.
Required Qualifications:
- Bachelor's degree in Cybersecurity, Information Systems, Computer Science, Business Administration, Emergency Management, Project Management, Information Assurance, or a related field.
- Minimum 5 years of experience supporting Federal cybersecurity, continuity planning, disaster recovery, operational resilience, or IT program management initiatives.
- Must be familiar with:
- NIST Risk Management Framework (SP 800-37)
- NIST SP 800-34 (Contingency Planning)
- NIST SP 800-53 Rev. 5
- FISMA
- Federal continuity planning requirements
- Federal cybersecurity compliance frameworks
- IT governance, operations, and recovery processes
- Experience managing multiple projects, workstreams, or operational initiatives within Federal IT environments.
- Experience conducting Business Impact Analyses (BIAs) and developing continuity and recovery planning documentation.
- Experience coordinating cross-functional teams and stakeholders supporting cybersecurity, compliance, and operational resilience activities.
- Knowledge of project management methodologies, risk management practices, and performance reporting.
- Strong organizational, communication, and stakeholder management skills.
- U.S. Citizenship required.
- Ability to obtain and maintain an NIH Public Trust.
Preferred Qualifications:
- PMP, CAPM, CISSP, CISM, CBCP, MBCP, or similar project management, cybersecurity, or business continuity certification.
- Experience supporting NIH, HHS, or other Federal civilian agencies.
- Experience supporting research, scientific, healthcare, or mission-critical environments.
- Experience coordinating continuity, disaster recovery, and cybersecurity compliance activities within RMF-based programs.
Compensation:
Salary Range: $135,000 - $165,000
The SkyePoint Decisions salary range for this position is a general guideline only. It represents an estimated range for this position and is just one piece of our total compensation package.
Salary at SkyePoint is determined by various factors, including but not limited to location, work schedule, the candidate’s combination of education, knowledge, skills, competencies, and experience, as well as contract-specific affordability, market data and business considerations.
In addition to a competitive salary, SkyePoint offers benefits including a certification incentive program, PTO, floating federal holiday options, several insurance options including HMO and High Deductible plans with Health Savings Accounts [HSAs], Flex Spending Accounts [FSAs], Full Dental Plans, Vision, ST/LT Disability, Life Insurance, and 401k matched.
What We Can Offer You:
- At SkyePoint, we go B.I.G. (beginning in GRATITUDE) by recognizing all we have and giving back to our employees, families, and communities. It instills a positive mindset that permeates all we do. By beginning in gratitude, SkyePoint can continue to spread living in gratitude each day.
- Great Benefits: Several insurance options including HMO and High Deductible plans with Health Savings Accounts [HSAs], Flex Spending Accounts [FSAs], Full Dental Plans, ST/LT Disability, Life Insurance, floating federal holiday options, and 401k matched
- Certificate Incentive Program: To promote professional development, we recognize and reward employees who obtain new certifications aligned with business needs.
- Flexible Work Environment
SkyePoint Decisions is an established ISO 9001:2015 and ISO/IEC 27001:2013 certified small business and appraised at CMMI Level 3 for Services and Development. We possess a common vision of excellence and foster a collaborative team culture built upon individual performance and accountability. We invest in our people and systems to create value for our clients. It is the SkyePoint Way. We are grateful for the opportunity to work with exceptional people and give back to the communities we serve. Our employees value the flexibility at SkyePoint that allows them to balance quality work and their personal lives.
SkyePoint Decisions is a participating E-Verify Employer.
U.S. Citizenship is required for most positions.
Equal Opportunity Employer/Veterans/Disabled.
CCPA Disclosure Notice Here
Bachelor's degree and 5+ years supporting Federal cybersecurity, continuity, disaster recovery, operational resilience, or IT program management. U.S. citizenship and ability to obtain NIH Public Trust required.
Key Responsibilities
- coordinating projects
- developing plans
- tracking risks
Skills & Tools
NIST Risk Management Framework (RMF), NIST SP 800-37, NIST SP 800-34, NIST SP 800-53 Rev. 5, FISMA, Integrated Master Schedules (IMS), Governance, Risk & Compliance (GRC), Assessment & Authorization (A&A), Microsoft Excel
Job Details
- Category: Project and Program Management
- Commitment: Full Time
- Workplace: Remote — Bethesda or Dulles or United States
- Salary: USD 135,000 – 165,000 / year
- Languages: English
Benefits
- 401k matching
- Generous paid time off
- Retirement plan
About SkyePoint Decisions
A technology services provider delivering cybersecurity, infrastructure, and application solutions to federal government clients. — Industry: Information Technology