New

[Contingent] Cybersecurity Program Manager (Executive Advisor)

Phia LLC
medical insurance, dental insurance, life insurance, vision insurance, paid time off, paid holidays, long term disability, 401(k)
United States, Virginia, Fairfax
11166 Fairfax Boulevard (Show on map)
May 15, 2026
DISCLAIMER: This position is in support of a current government proposal. Employment is contingent upon contract award to phia, LLC. Status: Proposal - Contingent upon Award Location: Hybrid - Washington, DC Metro Area Schedule: Full-time \| Core hours 0730-1600 EST, Monday-Friday Focus Areas: CISO Advisory, Executive Leadership, Enterprise Cybersecurity Strategy, Program Management, Insider Threat, Zero Trust, Federal Policy OVERVIEW phia is seeking a Senior Cybersecurity Program Manager (Executive Advisor) to serve as the most senior cybersecurity voice on a federal program - advising executive leadership on enterprise-wide cybersecurity strategy, risk, and compliance while providing overall program management for phia's contract team. This is a dual-hat leadership role requiring both deep technical credibility and executive-level communication skills. You will advise senior federal government officials on cybersecurity strategy, risk management, zero trust adoption, and federal compliance priorities; oversee the phia program team's delivery; represent the client in interagency cybersecurity working groups; and translate complex technical risks into clear, mission-focused guidance for decision-makers. WHAT YOU'LL DO Advise senior federal executive leadership (CISO, CIO, and above) on enterprise-wide cybersecurity strategy, risk management, and compliance priorities aligned with FISMA, FedRAMP, the Privacy Act, NIST frameworks, and CISA guidance. Act as the senior cybersecurity program advisor, providing executive-level decision support on policy, governance, technology investments, and modernization initiatives including zero trust architecture adoption and cloud migration security. Oversee the development and implementation of enterprise cybersecurity policies, standards, and procedures to ensure mission resilience and regulatory compliance. Manage the phia program: serve as the primary point of contact for all contract actions, oversee all contractor activities and deliverables, manage cost, schedule, and technical performance, and provide regular program status reporting. Guide incident response and crisis management efforts, briefing senior leadership during significant security events and coordinating with federal law enforcement and interagency partners. Direct enterprise risk assessments and security posture evaluations; identify systemic risks and prioritize remediation across critical systems. Lead and advise on Insider Threat program activities: maintain compliance with applicable federal Insider Threat policies, perform program assessments, develop annual program reports, maintain interagency liaison relationships, and research advanced analytic tools for insider threat detection. Represent the client organization in interagency cybersecurity working groups and task forces. Deliver regular executive briefings to senior leadership, translating complex technical risks into actionable, mission-impact terms. Mentor senior security managers and technical staff; build organizational cybersecurity capacity and support succession planning for key security leadership roles. WHO YOU ARE CISO Advisor: You have advised CISOs, CIOs, and senior executive leaders and given them guidance they could act on. You understand what they need to hear and how to communicate effectively. Federal Policy Expert: You have 15+ years of experience with FISMA, FedRAMP, NIST frameworks, CISA guidance, the Privacy Act, and OMB A-130 and understand how these frameworks interact in a large federal agency environment. Executive Communicator: You can transform a complex, multi-dimensional cybersecurity risk into a concise, decision-ready brief. You are comfortable presenting to the most senior levels of government leadership. Program Manager: You have successfully managed large, multi-task federal cybersecurity programs: you understand EVM, integrated master scheduling, staffing management, and what it takes to sustain a high-performing technical team. Insider Threat Leader: You have led or advised federal Insider Threat programs and understand the legal, privacy, and civil liberties sensitivities involved in operating such a program. Zero Trust Champion: You understand zero trust architecture principles and have advised on or overseen ZTA adoption in a federal enterprise setting. Mentor: You invest in developing the people around you. You elevate your team. PREFERRED SKILLS Prior experience advising a federal agency CISO or CIO on enterprise cybersecurity strategy Experience with interagency cybersecurity coordination Familiarity with Executive Order 14028 (Improving the Nation's Cybersecurity) and its implementation requirements for federal agencies Experience with ISO 27001 and HIPAA governance frameworks in addition to FISMA/NIST Prior experience supporting or leading a National Insider Threat Task Force member organization Experience with advanced analytic tools for insider threat detection and behavioral analysis REQUIRED EDUCATION + EXPERIENCE Education: Master's degree in Cybersecurity required Experience: 20+ years of experience in IT and Cybersecurity; 15+ years advising CISO, CIO, and executive leadership on enterprise cybersecurity strategy, risk management, and federal compliance; 10+ years delivering executive briefings that translate technical risks into mission-impact terms Certifications: Project Management Professional (PMP) - required Certified Information Security Manager (CISM - ISACA) - required Minimum one (1) of: CISA (ISACA), CRISC (ISACA), CISSP (ISC2), CGRC (ISC2) Clearance: Public Trust / Suitability clearance required GENERAL PROGRAM REQUIREMENTS Citizenship: Must be a U.S. Citizen. No exception. Work Hours: Full-time; Monday-Friday core hours 0730-1600 EST Work Location: Hybrid - Washington, DC Metro Area; on-site presence required. Travel: Occasional travel may be required in support of this program. Who We Are phia LLC ("phia") is a Northern Virginia based, small business established in 2011 with focus in Cyber Intelligence, Cyber Security/Defense, Intrusion Analysis & Incident Response, Cyber Architecture & Capability Analysis, Cyber Policy & Strategy, Information Assurance/Security, Compliance, Certification & Accreditation, Communications Security, Traditional Security, and Facilities Security. phia also provides cyber operations support functions such as: Program and Process Management, Engineering, Development, and Systems Administration that allows for Cyber Operations to efficiently integrate our customer's missions and objectives. phia supports various agencies and offices within the Department of Defense (DoD), Federal government, and private/commercial entities. phia offers excellent benefits to enhance work-life balance, including the following: Medical Insurance Dental Insurance Vision Insurance Life Insurance Short Term & Long Term Disability 401k Retirement Savings Plan with Company Match Paid Holidays Paid Time Off (PTO) Tuition and Professional Development Assistance phia does not discriminate on the basis of race, sex, color, religion, age, national origin, marital status, disability, veteran status, genetic information, sexual orientation, gender identity, or any other reason prohibited by law in the provision of employment opportunities and benefits.