Risk Management Framework Compliance Lead

This is a fully remote position, open to applicants in United States.

📋 Description

• Supervise and direct the overall implementation of Risk Management Framework (RMF) activities.

• Offer advanced expertise on RMF processes to guarantee consistent application of security controls, policies, and procedures across supported systems.

• Guide and mentor a team of RMF professionals.

• Ensure the provision of high-quality documentation and outputs, including System Security Plans (SSPs), Security Assessment Reports (SARs), and Plans of Action and Milestones (POA&Ms).

• Verify the accuracy, quality, and completeness of RMF deliverables.

• Foster continuous improvement and compliance.

• Serve as the primary point of contact for all RMF-related issues.

• Facilitate communication among internal teams, leadership, and external stakeholders.

• Ensure that RMF activities adhere to relevant regulations, policies, and guidelines.

• Oversee the integration of RMF processes organization-wide.

• Identify opportunities for enhancement and promote cybersecurity awareness and compliance.

• Lead the Authority to Operate (ATO) authorization and maintenance processes, including security control implementation, authorization package development, risk remediation, and continuous monitoring.

⛳️ Requirements

• Must be a U.S. Citizen.

• Capable of obtaining and maintaining the required Public Trust level clearance.

• Bachelor's Degree with 12 years of experience, Master's Degree with 10 years, Associate's Degree with 14 years, or High School Diploma or equivalent with 16 years of experience.

• One or more of the following relevant certifications: CISSP, CISM, CASP, CCISO, Security+, or CAP.

• Demonstrated experience in supporting Authority to Operate (ATO) authorization, maintenance, and continuous monitoring within FedRAMP High or other federal environments.

• Expertise in the Risk Management Framework (RMF), including NIST SP 800-37 and NIST SP 800-53.

• Comprehensive knowledge of information systems security principles, methodologies, and technologies, including operational requirements and cyber threats.

• Familiar with federal cybersecurity mandates, such as FISMA and FedRAMP.

• Ability to conduct thorough risk assessments, identify vulnerabilities, and offer actionable mitigation strategies in line with organizational priorities.

• Proficient in creating, reviewing, and validating RMF deliverables, including System Security Plans (SSPs), Security Assessment Reports (SARs), and POA&Ms.

• Adept at managing large-scale cybersecurity projects, ensuring compliance with timelines, resources, and organizational objectives.

• Active Secret Clearance is preferred.

🏝️ Benefits

• Medical insurance.

• Dental insurance.

• Vision insurance.

• Life insurance.

• Health savings account.

• Short-term disability.

• Long-term disability.

• Employee assistance program (EAP).

• Parental leave.

• 401(k).

• Paid time off (PTO) for vacation.

• Company-paid holidays.

• Employees may be eligible for overtime.

• Employees may be eligible for shift differential.

• Employees may be eligible for a discretionary bonus.