Job Title: Fractional Program Manager – Cybersecurity Services
Duration: 36 Months
Location: SARATOGA SPRINGS, NY 12688 (Remote/ Hybrid )
Position Type: Part Time Contract
Ceipal ID: VGP_CYBE736_SS
Role Purpose: The Fractional Program Manager (FPM) shall provide centralized program management oversight for the 36-month cybersecurity services engagement. The FPM is responsible for coordinating, tracking, and governing all activities across the four contracted service areas to ensure timely delivery, quality assurance, and alignment with Empire State University’s cybersecurity objectives.
Scope of Responsibility:
The FPM provides program management services across vCISO Strategy & Governance, NIST 800-171 Risk Assessment Updates, Incident Response Tabletop Exercises, and Incident Response Retainer services.
Core Responsibilities:
Develop and maintain an integrated master schedule; Coordinate deliverables and dependencies; Facilitate governance meetings; Track risks and issues; Support executive and Board-level reporting; Maintain program documentation.
Core Responsibilities (All Scopes) • Own the integrated master schedule across vCISO, NIST assessments, IR tabletop exercises, and IR retainer activities • Coordinate resources, milestones, and dependencies across workstreams • Track deliverables, approvals, and client sign‑offs • Facilitate recurring governance, status, and executive meetings • Maintain risk, issue, and action tracking • Ensure documentation consistency, traceability, and audit readiness • Support Board‑level and executive‑level communications • Manage transition support and knowledge continuity across the 36‑month term
Scope‑Aligned Responsibilities
1. vCISO Strategy & Governance • Coordinate ongoing vCISO advisory activities • Manage Risk Register lifecycle and updates • Track Security Roadmap progress • Support annual Board presentation preparation and delivery • Align governance activities with institutional goals
2. NIST 800‑171 Risk Assessment Update • Manage annual assessment cycles (scoping → assessment → reporting) • Coordinate evidence collection and stakeholder interviews • Schedule and facilitate Risk Workshops • Support findings validation and executive reporting
3. Incident Response Tabletop Exercises • Plan annual tabletop schedules • Coordinate scenario development and participant logistics • Track findings, recommendations, and follow‑up actions
4. Incident Response Retainer • Act as coordination point during incident activation • Ensure SLA adherence and stakeholder communications • Support post‑incident reporting and transition activities
Month-to-Month Deliverables
Months 1–3: Program initiation and baseline setup.
Months 4–9: Assessment execution, workshops, tabletop planning.
Months 10–12: Annual reporting and transition.
Months 13–24: Repeated annual cycles.
Months 25–35: Final maturity execution.
Month 36: Closeout and knowledge transfer.
Level of Effort:
Approximately 20 hours per month over 36 months, varying by phase.
-------------------------------------------------------------------------------------------------------------
V Group Inc. is an IT Services company that supplies IT staffing, project management, and delivery services in software, network, help desk, and all IT areas. Our primary focus is the public sector including state and federal contracts. We have multiple awards/ contracts with the following states: AR, CA, DE, FL, GA, IL, KY, MD, ME, MI, NC, NJ, NY, OH, OR, PA, SC, TX, VA, and WA. If you are considering applying for a position with V Group or partnering with us on a position, please feel free to contact me for any questions regarding our services and the advantages we can offer you as a consultant.
Please share my contact information with others working in Information Technology.
Website: www.vgroupinc.com
LinkedIn: www.linkedin.com/company/v-group/
Facebook: www.facebook.com/VGroupIT
Twitter: www.twitter.com/vgroupinc
