ISSO Program Manager

Nava

ISSO Program Manager leading RMF, ATO, and cybersecurity oversight for Nava PBC’s CMS government technology systems. Advising federal stakeholders and strengthening secure digital services.

Posted 8/6/2026full-timeRemote • Alabama, Arizona, California, Colorado, Connecticut, Florida, Illinois, Louisiana, Maine, Maryland, Massachusetts, Minnesota, Missouri, Montana, Nevada, New Jersey, New York, North Carolina, Ohio, Oklahoma, Oregon, Pennsylvania, Rhode Island, South Carolina, Tennessee, Texas, Utah, Virginia, Washington, Wisconsin • 🇺🇸 United StatesSeniorLead💰 $157,500 - $177,300 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive experience in risk management frameworks, cybersecurity for federal contracts, and security control implementation. Proven ability to lead agile development teams and manage complex projects while ensuring compliance with federal policies and regulations.

Highest-signal resume keywords

Risk Management FrameworkCybersecurity ExperienceFederal Security Officer ExperienceAgile Development LeadershipCISSP, CISM, or CompTIA Security+

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Security ControlsRisk AssessmentsIncident ResponseVulnerability ScanningConfiguration ManagementCloud InfrastructureContinuous IntegrationContinuous DeliverySecurity EngineeringCompliance

Soft Skills

Excellent Communication SkillsStrategic Delivery Planning

Tools & Technologies

ScrumKanbanSAFe

Certifications & Qualifications

CISSPCISMCompTIA Security+

Industry Keywords

Federal ContractsGovernment AgenciesAudit TrailsSecurity ClearanceAuthorization to Operate

Tech Stack

Tools & technologies

CloudCyber Security

About the role

Key responsibilities & impact

Lead Risk Management Framework activities and maintain the system’s Authorization to Operate
Oversee security controls, risk assessments, continuous monitoring, and incident response
Advise CMS stakeholders on the program’s security and privacy posture
Serve as an ISSO supporting implementation and maintenance of information security controls for assigned OEDA systems
Provide security engineering support for CMS-authorized cloud-based and managed service environments
Support the Authorizing Official and Authorizing Official Designated Representative with risk-based authorization decisions
Conduct security event logging, vulnerability scanning, and configuration management
Advise the Program ISSO on information system security and privacy
Ensure security and privacy controls comply with agency, department, and federal policies
Guide development of security documents and implementation of security and privacy controls
Collaborate with engineering teams, program leadership, and federal stakeholders to strengthen security posture and deliver secure digital services

Requirements

What you’ll need

Bachelor's degree
At least 7 years of relevant experience
7+ years of cybersecurity experience focused on federal contracts
Experience with custom software or cloud infrastructure programs/projects
Federal security officer experience
Experience working with or for government agencies
Understanding of government contracting, compliance, and audit trails
Experience leading and growing agile development teams and managing projects at scale
Experience leading large-scale, complex projects involving milestones, dependencies, integrations, risk, uncertainty, or scale
Experience with Scrum, Kanban, or SAFe and continuous integration and continuous delivery practices
Strategic delivery planning and contract management skills
Excellent written and verbal communication skills
Legal authorization to work in the United States
Ability to meet government contract requirements
Work authorization that does not require visa sponsorship now or in the future
May be subject to a government background check or security clearance
CISSP, CISM, or CompTIA Security+ credentials are highly desirable but not required

Benefits

Comp & perks

Comprehensive medical, dental, and vision plans
Disability, life, and accidental death insurance at no cost
Vacation, holidays, and floating holidays
12 paid federal holidays each year
Performance-based annual bonus for eligible employees
Paid parental leave plus weekly meals delivered to your home
Wellness program with physical, mental, and emotional health resources
Virtual doctor visits with no copay, depending on available providers
Sabbatical leave after continuous service
401(k) match of 4% of salary
Remote-first flexible work environment
Company laptop and home office setup assistance
Monthly reimbursement for eligible home office utility expenses
Internal training programs and professional development resources
LinkedIn Learning access and annual allowance for courses, tuition, and certifications
Referral bonus
Pre-tax commuter programs when applicable
Collaborative and remote-friendly team environment