Cybersecurity Program Manager

ASRC Federal Data Networx is seeking a Cybersecurity Program Manager to oversee federal cybersecurity program. Work Location: Remote Key Responsibilities - Serve as the primary cybersecurity and privacy advisor to System Owners for assigned systems. - Lead RMF activities, including development and maintenance of System Security and Privacy Plans (SSPPs), authorization packages, risk documentation, and supporting artifacts. - Ensure systems maintain Authorization to Operate (ATO) through assessment support, continuous monitoring, and compliance with NIST RMF, FISMA, and federal security requirements. - Assess security risks, validate security controls, and coordinate remediation of vulnerabilities and Plans of Action and Milestones (POA&Ms). - Maintain system inventories, security documentation, contingency plans, configuration management plans, and privacy documentation. - Collaborate with ISSMs, System Owners, Security Control Assessors, and technical teams to integrate security throughout the system lifecycle. - Monitor system security posture, review vulnerability and compliance scan results, and support continuous authorization initiatives. - Provide cybersecurity guidance, develop security policies and procedures, and deliver security awareness training. - Support security engineering, certification and accreditation activities, and implementation of security controls across systems. - Recommend process improvements and automation opportunities to enhance RMF and cybersecurity operations. - Perform independent quality assurance reviews of program performance and deliverables to ensure that contractual obligations are being met. Required Qualifications - Bachelor's degree in Cybersecurity, Information Assurance, Computer Science, Information Technology, or a related field. - Minimum 5–7 years of experience supporting information assurance, cybersecurity, RMF, or information system security, or an equivalent combination of education and experience. - Experience supporting federal cybersecurity programs and the NIST Risk Management Framework (RMF). - Experience developing and maintaining RMF documentation, authorization packages, and Governance, Risk, and Compliance (GRC) tools. - Strong knowledge of NIST SP 800-37, NIST SP 800-53, FISMA, FIPS 199, and federal privacy requirements. - Experience supporting Authorization to Operate (ATO), Continuous ATO (cATO), or Continuous Authorization efforts. - Strong analytical, communication, documentation, and stakeholder engagement skills. - Expertise in cybersecurity processes and protection of technical architecture. Required Certifications - Certified Information Systems Security Professional (CISSP) - Certified in Governance, Risk and Compliance (CGRC) or Certified Cloud Security Professional (CCSP) Preferred Qualifications - Experience supporting U.S. federal civilian agencies, preferably the USPTO. - Experience with continuous monitoring, vulnerability management, and security automation. - Familiarity with cloud security, DevSecOps, and continuous authorization initiatives. - Knowledge of privacy compliance activities, including Privacy Threshold Assessments (PTAs), Privacy Impact Assessments (PIAs), and System of Records Notices (SORNs).