Cybersecurity Program Manager

ASRC Federal•Reston, VA

1d•Remote

About The Position

ASRC Federal Data Networx is seeking a Cybersecurity Program Manager to oversee a federal cybersecurity program. This is a remote position. The role involves serving as the primary cybersecurity and privacy advisor to System Owners, leading RMF activities, and ensuring systems maintain Authorization to Operate (ATO). Responsibilities include assessing security risks, coordinating remediation, maintaining system documentation, and collaborating with various stakeholders to integrate security throughout the system lifecycle. The position also requires monitoring system security posture, providing cybersecurity guidance, supporting security engineering, and recommending process improvements. An independent quality assurance review of program performance and deliverables is also a key responsibility.

Requirements

Bachelor's degree in Cybersecurity, Information Assurance, Computer Science, Information Technology, or a related field.
Minimum 5–7 years of experience supporting information assurance, cybersecurity, RMF, or information system security, or an equivalent combination of education and experience.
Experience supporting federal cybersecurity programs and the NIST Risk Management Framework (RMF).
Experience developing and maintaining RMF documentation, authorization packages, and Governance, Risk and Compliance (GRC) tools.
Strong knowledge of NIST SP 800-37, NIST SP 800-53, FISMA, FIPS 199, and federal privacy requirements.
Experience supporting Authorization to Operate (ATO), Continuous ATO (cATO), or Continuous Authorization efforts.
Strong analytical, communication, documentation, and stakeholder engagement skills.
Expertise in cybersecurity processes and protection of technical architecture.
Certified Information Systems Security Professional (CISSP)
Certified in Governance, Risk and Compliance (CGRC) or Certified Cloud Security Professional (CCSP)

Nice To Haves

Experience supporting U.S. federal civilian agencies, preferably the USPTO.
Experience with continuous monitoring, vulnerability management, and security automation.
Familiarity with cloud security, DevSecOps, and continuous authorization initiatives.
Knowledge of privacy compliance activities, including Privacy Threshold Assessments (PTAs), Privacy Impact Assessments (PIAs), and System of Records Notices (SORNs).

Responsibilities

Serve as the primary cybersecurity and privacy advisor to System Owners for assigned systems.
Lead RMF activities, including development and maintenance of System Security and Privacy Plans (SSPPs), authorization packages, risk documentation, and supporting artifacts.
Ensure systems maintain Authorization to Operate (ATO) through assessment support, continuous monitoring, and compliance with NIST RMF, FISMA, and federal security requirements.
Assess security risks, validate security controls, and coordinate remediation of vulnerabilities and Plans of Action and Milestones (POA&Ms).
Maintain system inventories, security documentation, contingency plans, configuration management plans, and privacy documentation.
Collaborate with ISSMs, System Owners, Security Control Assessors, and technical teams to integrate security throughout the system lifecycle.
Monitor system security posture, review vulnerability and compliance scan results, and support continuous authorization initiatives.
Provide cybersecurity guidance, develop security policies and procedures, and deliver security awareness training.
Support security engineering, certification and accreditation activities, and implementation of security controls across systems.
Recommend process improvements and automation opportunities to enhance RMF and cybersecurity operations.
Perform independent quality assurance reviews of program performance and deliverables to ensure that contractual obligations are being met.