Senior Cybersecurity Program Manager Jobs in Massachusetts

Job Summary
Job Description
The Ocean Observatories Initiative (OOI) is seeking a Senior Manager, Cyberinfrastructure, Software & Cybersecurity to provide Facility-level leadership for OOI cybersecurity, cyberinfrastructure performance and oversight, and software development. This position is preferably based onsite in Woods Hole, Massachusetts. However, we welcome applications from qualified candidates who are interested in working remotely. Remote work arrangements will be considered based on the candidate's experience, qualifications, and the operational needs of the role.
Reporting to the OOI Senior Program Manager in the OOI Program Management Office (PMO), this position is the principal OOI voice for cyberinfrastructure, software, and cybersecurity to NSF, OOI governance and advisory bodies, reviewers, and other stakeholders.
The Senior Manager owns the OOI Cybersecurity Plan and associated risks, provides program-level direction and oversight for OOI software development, establishes and tracks OOI-wide CI/CS requirements and activities, and integrates status and performance information from the Data Center, software development team, and Implementing Organizations into clear management and sponsor reporting. Day-to-day management of the software development team remains with the Software Development Manager, who works under the priorities and direction established by the Senior Manager.
This is a senior technical and program-management position focused on reliable sustainment, cybersecurity compliance, software-team leadership, performance oversight, risk management, and effective communication across a distributed research facility. The role requires enough technical depth to understand and challenge proposed approaches, develop practical plans, make informed decisions, and occasionally work directly with technical staff on difficult issues.
The position is not the day-to-day manager of OOI Data Center operations. The OOI Data Center Program Manager is a key partner and independently manages Data Center hardware, routine system operations, infrastructure maintenance, patching and upgrades, backups, and related operational activities. The Senior Manager relies on that operational expertise, gathers status and performance information as needed, integrates it with software-development and Implementing Organization activities, and provides the OOI Senior Program Manager and stakeholders with the overall CI/CS/software picture.
Similarly, the Senior Manager is not the day-to-day manager of the OOI software development team. The Software Development Manager retains responsibility for day-to-day management of the developers, work execution, staff supervision, and coordination of development activities. The Senior Manager establishes OOI software priorities, requirements, budgets, schedules, and overall technical and programmatic direction; reviews progress and performance; and works with the Software Development Manager to ensure that development activities support OOI-wide priorities.
The Senior Manager establishes Facility-wide CI and cybersecurity requirements and works through OOI PIs, Program Managers including the Data Center Program Manager, and technical leads to drive implementation and corrective action. Unresolved issues are elevated to the OOI Senior Program Manager and Principal Investigator as necessary. Scientific data QA/QC leadership remains with the OOI Data Manager supported by the appropriate OOI scientific and Implementing Organization functions.
Essential Functions & Duties

• Own and maintain the OOI Cybersecurity Program and lead implementation of cybersecurity activities required by NSF and WHOI, translating requirements into practical OOI-wide plans, actions, schedules, and reporting.
• Identify, assess, track, and report cybersecurity risks in the OOI risk register; define and monitor mitigation and corrective actions and ensure significant risks and unresolved issues are elevated in a timely manner.
• Establish and coordinate implementation of OOI-wide cyberinfrastructure and cybersecurity requirements. Work with IO PIs and Program Managers including the Data Center Program Manager, and technical leads to resolve deficiencies and drive corrective action.
• Provide program-level direction and oversight for the OOI software development organization, including establishment of priorities, requirements, technical direction, schedules, budgets, contracts/statements of work, and performance expectations. Work through the Software Development Manager, who retains responsibility for day-to-day team management, work assignments, personnel supervision, and execution. Monitor progress and performance and resolve or elevate issues as needed. Provide Facility-level oversight of the systems used to ingest, process, store, archive, secure, and deliver OOI science and engineering data. Monitor appropriate performance measures and work with responsible operational leads to address adverse trends or deficiencies.
• Gather and synthesize status, metrics, accomplishments, upcoming work, resource needs, problems, risks, and corrective actions from the Data Center Program Manager, software development team, and IOs into concise reporting for OOI leadership and sponsors.
• Serve as the Facility-level CI/CS/software representative to NSF, the OOI Facility Board (OOIFB), the OOIFB Data Systems Committee (DSC), external reviewers and auditors, scientists, technical partners, and other stakeholders.
• Develop near- and mid-term CI, software, and cybersecurity plans and contribute associated scope, schedule, budget, licensing, lifecycle/refresh, and subcontractor needs to OOI annual work plans and other program-planning activities, with emphasis on sustainment and targeted, cost-effective improvements.
• Coordinate program-level communication, follow-up, and reporting for significant CI or cybersecurity incidents and systemic issues while operational response remains with the responsible Data Center or IO technical leads.
• Maintain sufficient technical engagement to evaluate proposed approaches, challenge assumptions, make sound technical/programmatic decisions, ensure appropriate documentation is maintained, and work hands-on with technical staff when useful.

Required Experience & Education

• Master's degree, or equivalent combination of education and substantial professional experience, in computer science, information systems, cybersecurity, software engineering, engineering, computational science, or a related field.
• Demonstrated leadership of complex cyberinfrastructure, software, cybersecurity, information-technology, or scientific data-system activities in a multi-organizational environment.
• Demonstrated experience leading or overseeing software-development activities and/or subcontracted technical teams, including establishing priorities and requirements, work planning, technical direction, schedules, budgets, contracts or statements of work, performance oversight, and progress reporting. Experience developing, implementing, or overseeing cybersecurity plans, requirements, risk-management activities, corrective actions, and compliance obligations in a research, academic, government, or comparable environment.
• Technical breadth sufficient to work effectively across software development, enterprise systems, networks, databases, APIs, identity/access management, system administration, vulnerability management, backups, data storage, and data delivery. Deep expertise in every area is not required.
• Strong program/project management and written/oral communication skills, including the ability to lead through influence across distributed teams, establish priorities and requirements, drive issues to closure, and explain complex technical matters clearly to management, sponsors, reviewers, and non-specialist stakeholders.

Preferred Experience & Education

• Experience with large-scale scientific, research, data-management, observatory, or other mission-critical data systems.
• Experience with federally sponsored research programs, academic research organizations, NSF, or sponsor-facing technical program management.
• Experience applying cybersecurity requirements or frameworks in an environment that combines enterprise IT, software development, scientific data systems, and distributed organizational responsibilities.
• Demonstrated ability to move comfortably between planning and management oversight and hands-on technical investigation or troubleshooting when needed.

Physical Requirements

• Primarily office/computer-based work; ability to work at a computer for extended periods and occasionally lift/carry computer or related equipment weighing less than 25 pounds.

Travel

• Occasional travel may be required for meetings with NSF, OOI Implementing Organizations, the OOIFB/DSC, reviews, or other program activities.

Additional Job Requirements
Salary Range: $215,183 - $283,503
The salary range provided for this position reflects the expected minimum and maximum base pay for new hires. Actual compensation will be determined based on factors such as relevant skills, experience, and qualifications, as well as internal equity and market conditions. In addition to base salary, eligible employees also receive a comprehensive benefits package.
WHOI accepts applications on a rolling basis - applications will be reviewed as they are received, and we encourage you to submit your application as soon as possible to ensure full consideration. While we will continue to review applications until the position is filled, and early applicants may have an advantage in the selection process.
EEO Statement
Woods Hole Oceanographic Institution (WHOI) provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.
It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.