Cybersecurity Program Manager

ASRC Federal; Reston (VA); Hybrid; USD 120,000 - 160,000; Full time

Benefits offered by this job

Health insurance

401(k)

Education assistance

Paid time off

Job summary

ASRC Federal Data Networx is seeking a Cybersecurity Program Manager to oversee federal cybersecurity programs remotely. You will lead RMF activities, develop security documentation, and coordinate authorization to operate across systems while collaborating with ISSMs and cross-functional teams.

The role requires a Bachelor's degree in a related field and 5–7 years' experience in information assurance, RMF, or federal cybersecurity programs, with strong knowledge of NIST SP 800-37/53 and FISMA.

Qualifications

• Bachelor's degree in Cybersecurity, Information Assurance, Computer Science, Information Technology, or related field.
• 5–7 years of experience in information assurance, cybersecurity, RMF, or related areas.
• Experience with federal cybersecurity programs and NIST RMF guidance.
• Experience developing RMF documentation and governance artifacts.
• Strong knowledge of NIST SP 800-37/53, FISMA, FIPS 199, and privacy requirements.

Responsibilities

• Serve as the primary cybersecurity advisor to System Owners for assigned systems.
• Lead RMF activities, including SSPP development and authorization packages.
• Ensure ATO through assessment, monitoring, and compliance with RMF and federal security requirements.
• Assess security risks, validate controls, and coordinate remediation of POA&Ms.
• Maintain system inventories, security docs, contingency plans, and privacy docs.
• Collaborate with ISSMs and technical teams to integrate security across lifecycle.
• Monitor security posture, review scans, and support continuous authorization.
• Provide cybersecurity guidance, develop security policies, and deliver awareness training.
• Support security engineering, certification, and implementation of controls.
• Recommend process improvements to enhance RMF and cybersecurity ops.
• Perform QA reviews of program performance and deliverables.

Skills

RMF expertise

NIST RMF knowledge

Security governance

Technical communication

Education

Bachelor's degree in Cybersecurity/Information Assurance/CS/IT

Tools

GRC tools

RMF tooling

Job description

Posted Monday, August 24, 2026 at 5:00 AM

ASRC Federal is a leading government contractor furthering missions in space, public health and defense. As an Alaska Native owned corporation, our work helps secure an enduring future for our shareholders. Join our team and discover why we are atop veteran employer and Certified Great Place to Work™

ASRC Federal Data Networx is seeking aCybersecurity Program Manager to oversee federal cybersecurity program.

Work Location

Remote

Key Responsibilities

• Serve as the primary cybersecurity and privacy advisor to System Owners for assigned systems.
• Lead RMF activities, including development and maintenance of System Security and Privacy Plans (SSPPs), authorization packages, risk documentation, and supporting artifacts.
• Ensure systems maintain Authorization to Operate (ATO) through assessment support, continuous monitoring, and compliance with NIST RMF, FISMA, and federal security requirements.
• Assess security risks, validate security controls, and coordinate remediation of vulnerabilities and Plans of Action and Milestones (POA&Ms).
• Maintain system inventories, security documentation, contingency plans, configuration management plans, and privacy documentation.
• Collaborate with ISSMs, System Owners, Security Control Assessors, and technical teams to integrate security throughout the system lifecycle.
• Monitor system security posture, review vulnerability and compliance scan results, and support continuous authorization initiatives.
• Provide cybersecurity guidance, develop security policies and procedures, and deliver security awareness training.
• Support security engineering, certification and accreditation activities, and implementation of security controls across systems.
• Recommend process improvements and automation opportunities to enhance RMF and cybersecurity operations.
• Perform independent quality assurance reviews of program performance and deliverables to ensure that contractual obligations are being met.

Required Qualifications

• Bachelor's degree in Cybersecurity, Information Assurance, Computer Science, Information Technology, or a related field.
• Minimum 5–7 years of experience supporting information assurance, cybersecurity, RMF, or information system security, or an equivalent combination of education and experience.
• Experience supporting federal cybersecurity programs and the NIST Risk Management Framework (RMF).
• Experience developing and maintaining RMF documentation, authorization packages, and Governance, Risk, and Compliance (GRC) tools.
• Strong knowledge of NIST SP 800-37, NIST SP 800-53, FISMA, FIPS 199, and federal privacy requirements.
• Experience supporting Authorization to Operate (ATO), Continuous ATO (cATO), or Continuous Authorization efforts.
• Strong analytical, communication, documentation, and stakeholder engagement skills.
• Expertise in cybersecurity processes and protection of technical architecture.

Required Certifications

• Certified Information Systems Security Professional (CISSP)
• Certified in Governance, Risk and Compliance (CGRC) or Certified Cloud Security Professional (CCSP)

Preferred Qualifications

• Experience supporting U.S. federal civilian agencies, preferably the USPTO.
• Experience with continuous monitoring, vulnerability management, and security automation.
• Familiarity with cloud security, DevSecOps, and continuous authorization initiatives.
• Knowledge of privacy compliance activities, including Privacy Threshold Assessments (PTAs), Privacy Impact Assessments (PIAs), and System of Records Notices (SORNs).

We invest in the lives of our employees, both in and out of the workplace, by providing competitive pay and benefits packages. Benefits offered may include health care, dental, vision, life insurance; 401(k); education assistance; paid time off including PTO, holidays, and any other paid leave required by law. The salary offered will depend on several factors including, but not limited to, relevant experience, skills, education, geographic location, internal equity, business needs, and other factors permitted by law. Posted pay ranges are a general guideline only and are not a guarantee of compensation or salary.

EEO Statement

ASRC Federal and its Subsidiaries are Equal Opportunity employers. All qualified applicants will receive consideration for employment without regard to race, gender, color, age, sexual orientation, gender identification, national origin, religion, marital status, ancestry, citizenship, disability, protected veteran status, or any other factor prohibited by applicable law.