Federal Cybersecurity Program Lead: Controls & Pen Test

Kaizen Lab Inc.; Richmond (VA); On-site; USD 140,000 - 190,000; Full time

Job summary

Kaizen Lab Inc. seeks a Cybersecurity Program Manager to oversee a government client’s cybersecurity program, focusing on controls testing and penetration testing to assess security posture.

You will ensure compliance with NIST 800-53 v5, NIST 800-37, and FISMA throughout the program lifecycle, including RMF/SA&A oversight. The role requires 10+ years in federal cybersecurity program management, strong leadership, and the ability to brief executives and stakeholders on risk and remediation

Qualifications

• Must be a U.S. citizen with 10+ years in cybersecurity program management.
• Experience leading controls testing and penetration testing programs in federal environments.
• Deep knowledge of NIST 800-53 v5, NIST 800-37, and FISMA requirements.
• Proven RMF/SA&A lifecycle management and stakeholder communications.

Responsibilities

• Lead a cybersecurity program covering controls testing and penetration testing.
• Ensure compliance with NIST 800-53 v5, NIST 800-37, and FISMA throughout the lifecycle.
• Oversee RMF process and SA&A, with timely documentation.
• Supervise testing activities, scoping, execution, and reporting of findings.
• Develop and maintain program schedule and deliverables to quality standards.
• Serve as primary client liaison, providing updates and managing expectations.
• Oversee SSPs, SARs, penetration reports, and POA&Ms delivery.
• Provide guidance on risk mitigation and remediation planning.

Skills

US Citizenship

Program management

Cybersecurity

RMF process

NIST 800-53 v5

NIST 800-37

FISMA compliance

Penetration testing oversight

Stakeholder management

Executive briefings

Education

Bachelor’s degree in Cybersecurity/IT/Business Administration or related field

Tools

PTES

NIST 800-115

Job description

Kaizen Lab Inc. seeks a Cybersecurity Program Manager to oversee a government client’s cybersecurity program, focusing on controls testing and penetration testing to assess security posture.

You will ensure compliance with NIST 800-53 v5, NIST 800-37, and FISMA throughout the program lifecycle, including RMF/SA&A oversight. The role requires 10+ years in federal cybersecurity program management, strong leadership, and the ability to brief executives and stakeholders on risk and remediation