CASC Product Owner: Compliance, Asset & Security

Aleut Federal; Colorado Springs (CO); Hybrid; USD 155,000 - 170,000; Full time

Benefits offered by this job

Health insurance

Dental/Vision Insurance

Paid Time Off

Disability insurance

Life insurance

401k and match

Job summary

Aleut Federal is seeking a Compliance, Asset, Security, & Configuration Management (CASC) Manager to own and mature the organization's compliance posture, IT asset lifecycle, security configuration standards, and change/configuration management practices. This end-to-end product-ownership role operates in a fully cloud-native, CMMC Level 2‑obligated environment.

The ideal candidate is highly organized, technically fluent across cyber, cloud, and compliance domains, and capable of owning outcomes

Qualifications

• Strong technical proficiency across cybersecurity, cloud platforms, and compliance frameworks.
• Working knowledge of CMMC Level 2 / NIST 800-171 and audit processes.
• Experience with IT asset management and lifecycle tracking.
• Experience with configuration/change management tooling.

Responsibilities

• Own and maintain compliance posture against CMMC Level 2 and NIST 800-171.
• Manage IT asset inventory and lifecycle from procurement to disposal.
• Maintain baseline security configuration standards and monitor drift.
• Lead ticket ownership in IT service desk for CASC functions.

Skills

Cybersecurity

Cloud platforms (Azure/M365)

Compliance frameworks

Education

Bachelor's degree in IT/Cybersecurity/CS

Tools

Jira

ServiceNow

Microsoft Purview

Job description

Aleut Federal is seeking a Compliance, Asset, Security, & Configuration Management (CASC) Manager to own and mature the organization's compliance posture, IT asset lifecycle, security configuration standards, and change/configuration management practices. This end-to-end product-ownership role operates in a fully cloud-native, CMMC Level 2‑obligated environment.

The ideal candidate is highly organized, technically fluent across cyber, cloud, and compliance domains, and capable of owning outcomes