Work Location and On-Site/Telework Requirements: Hybrid - NIH, 6555 Rock Spring Drive, Bethesda, MD. On site for kickoff, quarterly reviews, governance-body sessions, and monthly IC office hours.
Citizenship: U.S. Citizenship required
Clearance: All staff must obtain NIH suitability and a PIV credential and be fluent in English. Anyone doing risk or vulnerability testing needs a current T2 (BI) or higher investigation.
Overview:
eTelligent Group is hiring a Senior Program Manager to lead the NIH Governance, Risk & Compliance (GRC) Zero Trust Architecture (ZTA) Support Services task order for the NIH Office of the Chief Information Officer (OCIO). This is a Key Personnel position. You will be the single accountable contractor lead for a lean, senior 7.5-FTE team organized into three delivery pods (Architecture, Risk & Policy, and Program Operations). You will own schedule, quality, staffing, risk, and all communications with the Contracting Officer (CO) and Contracting Officer's Representative (COR). The order is firm-fixed-price and deliverable-driven, with eight major products due in the first 90-120 days.
Responsibilities:
- Serve as the single point of contact to the CO (scope, price, terms, key personnel) and the COR (technical direction, acceptance, status). Coordinate with NIH OCIO, the Office of IT Architecture (OITA), the Division of GRC, and the Information Security Assurance Office (ISAO).
- Baseline and run a resource-loaded Integrated Master Schedule (IMS) covering every SOW due date: IC office hours by day 30, the OCIO ZTA Wiki by day 60, governance products by day 90, and the Services Matrix, 72-system controls mapping, AI Use Case Inventory, and ZTA Overlay by day 120.
- Review the risk and issue register weekly, with early-warning checkpoints at days 45 and 75.
- Own the Quality Control Plan (QCP). Deliver the draft at kickoff and the final within 15 days. Enforce the three-gate review (author, peer SME, release review) and the five-business-day draft/final and correction cycle, including comment-disposition matrices.
- Deliver the Monthly Status Report, covering performance metrics (100% on-time delivery, 60;95% first-pass acceptance, Wiki freshness, office-hours participation) and the GFE inventory certification.
- Lead monthly IC office hours with GRC/ISAO and quarterly program reviews with OCIO leadership. Drive participation from 20+ of NIH's 27 Institutes and Centers (ICs) each quarter.
- Manage staffing, onboarding (NIH suitability, PIV, personnel rosters), and performance for full-time, part-time, and teaming-partner staff.
- Manage deliverable-based invoicing milestones. For Task 8 Special Projects, return a task-assignment proposal (scope, deliverables, schedule, labor mix, FFP) within five business days of a government request.
- Keep every product traceable to EO 14028, OMB M-22-09, the CISA Zero Trust Maturity Model (ZTMM) v2.0, and the HHS ZTA Strategy.
Required Qualifications:
- 8+ years of relevant IT project/program management experience, including success leading complex, multi-stakeholder federal IT programs in cybersecurity or IT transformation.
- Current PMP or PgMP certification (or equivalent).
- Experience managing the preparation and lifecycle of ATO and A&A packages in line with NIST, FISMA, and agency frameworks.
- Program management oversight of Zero Trust Architecture, ICAM, or similar enterprise security modernization.
- Bachelor's degree.
- Ability to obtain an NIH suitability determination and PIV credential; fluent in English.
Preferred Qualifications:
- 15-20+ years of IT experience, including 10+ years leading federal cybersecurity programs.
- HHS, NIH, or federal health experience; experience with FFP, deliverable-based task orders.
- Hands-on familiarity with NIST RMF (SP 800-37), SP 800-53, FedRAMP continuous monitoring, and High Value Asset (HVA) programs.
- ITIL, CSM/SAFe, or Agile/DevSecOps delivery experience.
- Current National Institutes of Health (NIH) or U.S. Department of Health and Human Services (HHS) experience is highly preferred.
