Risk Management Framework Compliance Lead

This is a fully remote position, open to applicants in United States.

📋 Description

• Supervise and coordinate the comprehensive execution of Risk Management Framework (RMF) activities.

• Offer advanced knowledge on RMF processes to guarantee the consistent implementation of security controls, policies, and procedures across supported systems.

• Lead and mentor a team of RMF experts.

• Ensure the delivery of high-quality documentation and outputs, including System Security Plans (SSPs), Security Assessment Reports (SARs), and Plans of Action and Milestones (POA&Ms).

• Maintain the accuracy, quality, and completeness of RMF deliverables while promoting continuous improvement and compliance.

• Serve as the primary contact for all RMF-related inquiries.

• Facilitate effective communication among internal teams, leadership, and external stakeholders.

• Ensure RMF activities adhere to applicable regulations, policies, and guidelines.

• Oversee the integration of RMF processes throughout the organization.

• Identify opportunities for enhancement and promote cybersecurity awareness and compliance.

• Lead the Authority to Operate (ATO) authorization and maintenance processes, including the implementation of security controls, development of authorization packages, risk remediation, and continuous monitoring.

⛳️ Requirements

• U.S. Citizenship is required, with the capability to obtain and maintain the necessary Public Trust level clearance.

• A Bachelor's Degree with 12 years of experience, a Master's Degree with 10 years, an Associate's Degree with 14 years, or a High School Diploma (or equivalent) with 16 years of experience is required.

• One or more of the following certifications are needed: CISSP, CISM, CASP, CCISO, Security+, or CAP.

• Demonstrated experience in supporting Authority to Operate (ATO) authorization, maintenance, and continuous monitoring within FedRAMP High or other federal environments.

• Deep expertise in the Risk Management Framework (RMF), specifically NIST SP 800-37 and NIST SP 800-53.

• Extensive knowledge of information systems security principles, methodologies, and technologies, including operational requirements and cyber threats.

• Familiarity with federal cybersecurity mandates such as FISMA and FedRAMP.

• Capability to conduct comprehensive risk assessments, identify vulnerabilities, and offer actionable mitigation strategies that align with organizational priorities.

• Proficient in creating, reviewing, and validating RMF deliverables such as System Security Plans (SSPs), Security Assessment Reports (SARs), and POA&Ms.

• Experienced in managing large-scale cybersecurity projects while ensuring compliance with timelines, resources, and organizational objectives.

• Preferred: Active Secret Clearance.

• Preferred: Experience with continuous ATO or automated control evidence.

🏝️ Benefits

• Medical insurance.

• Dental insurance.

• Vision insurance.

• Life insurance.

• Health savings account.

• Short-term disability.

• Long-term disability.

• Employee assistance program (EAP).

• Parental leave.

• 401(k).

• Paid time off (PTO) for vacation.

• Company-paid holidays.

• Overtime eligibility.

• Shift differential eligibility.

• Discretionary bonus eligibility.