Cybersecurity Program Manager

🕒 4 days ago

⚔️ Virginia – Remote

⚔️ Virginia – Remote

⏰ Full Time

🟡 Mid-level

🟠 Senior

📋 Program Manager

👻 Ghost score 10%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

ASRC Federal

WebsiteLinkedInAll Job Openings

5001 - 10000 employees

Founded 2003

🎖️ Defense

🚀 Aerospace

🏛️ Government

Defense • Aerospace • Government

ASRC Federal is a wholly-owned subsidiary of Arctic Slope Regional Corporation that provides federal government contracting services across space, civilian, defense & intelligence, national security, and health markets. It delivers engineering solutions, digital operations and IT modernization, software, applications & analytics, supply chain management & logistics, infrastructure operations, and professional services to support missions such as NASA space programs, FAA aviation safety/operations, Air Force industrial support, cyber defense, and base/resiliency operations. The company operates a family of businesses whose earnings support ASRC’s more than 14,000 Iñupiaq shareholders and employs roughly 9,000 people.

📋 Description

• Serve as the primary cybersecurity and privacy advisor to System Owners for assigned systems • Lead RMF activities, including development and maintenance of System Security and Privacy Plans (SSPPs), authorization packages, risk documentation, and supporting artifacts • Ensure systems maintain Authorization to Operate (ATO) through assessment support, continuous monitoring, and compliance with NIST RMF, FISMA, and federal security requirements • Assess security risks, validate security controls, and coordinate remediation of vulnerabilities and Plans of Action and Milestones (POA&Ms) • Maintain system inventories, security documentation, contingency plans, configuration management plans, and privacy documentation • Collaborate with ISSMs, System Owners, Security Control Assessors, and technical teams to integrate security throughout the system lifecycle • Monitor system security posture, review vulnerability and compliance scan results, and support continuous authorization initiatives • Provide cybersecurity guidance, develop security policies and procedures, and deliver security awareness training • Support security engineering, certification and accreditation activities, and implementation of security controls across systems • Recommend process improvements and automation opportunities to enhance RMF and cybersecurity operations • Perform independent quality assurance reviews of program performance and deliverables to ensure that contractual obligations are being met

🎯 Requirements

• Bachelor's degree in Cybersecurity, Information Assurance, Computer Science, Information Technology, or a related field • Minimum 5–7 years of experience supporting information assurance, cybersecurity, RMF, or information system security, or an equivalent combination of education and experience • Experience supporting federal cybersecurity programs and the NIST Risk Management Framework (RMF) • Experience developing and maintaining RMF documentation, authorization packages, and Governance, Risk, and Compliance (GRC) tools • Strong knowledge of NIST SP 800-37, NIST SP 800-53, FISMA, FIPS 199, and federal privacy requirements • Experience supporting Authorization to Operate (ATO), Continuous ATO (cATO), or Continuous Authorization efforts • Strong analytical, communication, documentation, and stakeholder engagement skills • Expertise in cybersecurity processes and protection of technical architecture • Certified Information Systems Security Professional (CISSP) • Certified in Governance, Risk and Compliance (CGRC) or Certified Cloud Security Professional (CCSP)

🏖️ Benefits

• Remote work arrangement