ASRC Federal Data Networx is seeking a Cybersecurity Program Manager to oversee federal cybersecurity program. Work Location: Remote
Key Responsibilities
- Serve as the primary cybersecurity and privacy advisor to System Owners for assigned systems.
- Lead RMF activities, including development and maintenance of System Security and Privacy Plans (SSPPs), authorization packages, risk documentation, and supporting artifacts.
- Ensure systems maintain Authorization to Operate (ATO) through assessment support, continuous monitoring, and compliance with NIST RMF, FISMA, and federal security requirements.
- Assess security risks, validate security controls, and coordinate remediation of vulnerabilities and Plans of Action and Milestones (POA&Ms).
- Maintain system inventories, security documentation, contingency plans, configuration management plans, and privacy documentation.
- Collaborate with ISSMs, System Owners, Security Control Assessors, and technical teams to integrate security throughout the system lifecycle.
- Monitor system security posture, review vulnerability and compliance scan results, and support continuous authorization initiatives.
- Provide cybersecurity guidance, develop security policies and procedures, and deliver security awareness training.
- Support security engineering, certification and accreditation activities, and implementation of security controls across systems.
- Recommend process improvements and automation opportunities to enhance RMF and cybersecurity operations.
- Perform independent quality assurance reviews of program performance and deliverables to ensure that contractual obligations are being met.
Required Qualifications
- Bachelor's degree in Cybersecurity, Information Assurance, Computer Science, Information Technology, or a related field.
- Minimum 5–7 years of experience supporting information assurance, cybersecurity, RMF, or information system security, or an equivalent combination of education and experience.
- Experience supporting federal cybersecurity programs and the NIST Risk Management Framework (RMF).
- Experience developing and maintaining RMF documentation, authorization packages, and Governance, Risk, and Compliance (GRC) tools.
- Strong knowledge of NIST SP 800-37, NIST SP 800-53, FISMA, FIPS 199, and federal privacy requirements.
- Experience supporting Authorization to Operate (ATO), Continuous ATO (cATO), or Continuous Authorization efforts.
- Strong analytical, communication, documentation, and stakeholder engagement skills.
- Expertise in cybersecurity processes and protection of technical architecture.
Required Certifications
- Certified Information Systems Security Professional (CISSP)
- Certified in Governance, Risk and Compliance (CGRC) or Certified Cloud Security Professional (CCSP)
Preferred Qualifications
- Experience supporting U.S. federal civilian agencies, preferably the USPTO.
- Experience with continuous monitoring, vulnerability management, and security automation.
- Familiarity with cloud security, DevSecOps, and continuous authorization initiatives.
- Knowledge of privacy compliance activities, including Privacy Threshold Assessments (PTAs), Privacy Impact Assessments (PIAs), and System of Records Notices (SORNs).