Risk Management Framework Compliance Lead

This is a fully remote position, open to applicants in United States.

📋 Description

• Supervise and manage the implementation of Risk Management Framework (RMF) activities.

• Ensure compliance with the principles and standards set by NIST SP 800-37 and NIST SP 800-53.

• Offer expert advice on RMF processes and security controls, as well as policies and procedures across DHRA systems.

• Guide and mentor a team of RMF specialists.

• Ensure the production of high-quality System Security Plans (SSPs), Security Assessment Reports (SARs), Plans of Action and Milestones (POA&Ms), and other RMF outputs.

• Guarantee the accuracy, quality, completeness, continuous enhancement, and compliance of RMF deliverables.

• Act as the primary contact for all RMF-related inquiries.

• Facilitate communication among internal teams, leadership, and external stakeholders.

• Maintain adherence to regulations, policies, and guidelines.

• Oversee the organizational integration of RMF processes while promoting cybersecurity awareness and compliance.

• Lead the Authorization to Operate (ATO) process and its maintenance, including the implementation of security controls, development of authorization packages, risk remediation, and continuous monitoring.

⛳️ Requirements

• Must be a U.S. Citizen.

• Capability to obtain and maintain the necessary Public Trust level clearance.

• A Bachelor's Degree with 12 years of experience, a Master's Degree with 10 years, an Associate's Degree with 14 years, or a High School Diploma or equivalent with 16 years of experience.

• One or more relevant certifications such as CISSP, CISM, CASP, CCISO, Security+, or CAP.

• Proven experience in supporting Authority to Operate (ATO) authorization, maintenance, and continuous monitoring in FedRAMP High or other federal environments.

• Expertise in the Risk Management Framework (RMF), particularly NIST SP 800-37 and NIST SP 800-53.

• Comprehensive knowledge of information systems security principles, methodologies, and technologies.

• Understanding of operational requirements and cyber threats.

• Familiarity with FISMA and FedRAMP.

• Ability to conduct thorough risk assessments, identify vulnerabilities, and provide actionable mitigation strategies.

• Proficient in the creation, review, and validation of RMF deliverables, including SSPs, SARs, and POA&Ms.

• Skilled in managing extensive cybersecurity projects.

🏝️ Benefits

• Medical insurance.

• Dental insurance.

• Vision insurance.

• Life insurance.

• Health savings account.

• Short-term disability.

• Long-term disability.

• Employee Assistance Program (EAP).

• Parental leave.

• 401(k).

• Paid time off (PTO) for vacation.

• Company-paid holidays.

• Potential overtime eligibility.

• Shift differential eligibility.

• Discretionary bonus eligibility.