Cybersecurity Program Lead

American Systems•Middletown, RI

About The Position

AMERICAN SYSTEMS is an employee-owned federal government contractor supporting national priority programs through our strategic solutions in the areas of Information Technology, Test & Evaluation, Engineering & Analysis, and Training. We are seeking a Cybersecurity Program Lead to support complex customer programs requiring a blend of cybersecurity, information assurance, systems security, and program execution expertise. This role will serve as a key technical and programmatic point of contact, supporting security, compliance, risk management, and mission-focused technical activities across applications, networks, and information systems. The Cybersecurity Program Lead will be comfortable operating with a high degree of autonomy, leading coordination across technical and program stakeholders, and balancing strategic oversight with hands-on execution. This role requires a strong communicator who can facilitate discussions, brief stakeholders, and drive alignment across developers, users, program managers, security personnel, validators, and customer representatives.

Requirements

Active Secret clearance required, or eligibility for reinstatement.
Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Information Systems, Systems Engineering, or a related field.
8+ years of related experience in cybersecurity, information assurance, systems security, risk management, compliance, program support, or a related discipline.
Experience supporting cybersecurity or information assurance efforts for complex systems, applications, or networked environments.
Experience supporting DoD, Navy, or other federal programs.
Experience developing or maintaining security documentation such as security plans, contingency plans, assessment artifacts, or authorization package materials.
Experience supporting security assessments, vulnerability management, remediation tracking, and compliance activities.
Working knowledge of federal cybersecurity requirements, risk management practices, and security control frameworks.
Ability to analyze security requirements, identify compliance gaps, and coordinate corrective actions with technical and program teams.
Demonstrated ability to work independently, manage competing priorities, and operate effectively in a highly autonomous role.
Strong written and verbal communication skills, including the ability to lead meetings, facilitate discussions, and brief stakeholders.

Nice To Haves

CSWF certification required with CompTIA Security+ certification or strongly preferred.

Responsibilities

Serve as a technical and programmatic lead supporting cybersecurity, compliance, risk management, and systems security activities across customer applications, networks, and information systems.
Operate effectively in an ISSO-type role, with responsibility for supporting certification and accreditation activities, developing and maintaining required security documentation, evaluating security controls, identifying compliance gaps, and recommending corrective actions.
Apply strong familiarity with RMF, NIST-based security controls, STIGs, POA&M management, and ATO package support to help ensure systems meet applicable federal, DoD, customer, and organizational security requirements.
Develop, maintain, and oversee security documentation and artifacts such as system security plans, contingency plans, Security Test and Evaluation plans, assessment materials, and related compliance deliverables.
Conduct or support risk assessments, vulnerability assessments, compliance reviews, and remediation tracking, and help drive resolution of identified security findings.
Oversee secure configuration practices, security tool implementation and validation, compliance scan review, and continuous monitoring activities, and support incident response and audit readiness efforts as needed.
Serve as a key liaison among developers, users, program managers, system administrators, security managers, validators, customer representatives, subcontractors, and vendors to ensure alignment on technical, security, and program objectives.
Lead and facilitate meetings, working sessions, and briefings with technical and non-technical stakeholders to communicate security status, risks, vulnerabilities, assessment results, and remediation progress.
Provide technical review and oversight of system architectures, program documentation, and related deliverables, and recommend system and process improvements to strengthen security posture and program execution.
Operate with a high degree of independence, helping establish and grow cybersecurity support activities across assigned efforts while balancing strategic coordination with hands-on execution.