Lead RMF and assessment-and-authorization strategy for PIEE systems
Plan and coordinate security-control implementation and assessment
Maintain visibility into authorization status and vulnerabilities
Integrate cybersecurity requirements into development and operations
Coordinate with cybersecurity engineers and system stakeholders
Ensure compliance with DISA STIGs and NIST controls
Provide executive briefings and risk recommendations
Benefits
Comprehensive health and wellness programs
Professional development opportunities
Flexible work arrangements
Support for certifications and training
Collaborative work environment
Full Job Description
Cybersecurity / RMF Lead
Position Summary
Leads cybersecurity governance, RMF assessment and authorization, continuous authorization, control evidence, vulnerability risk management, and security integration across architecture, development, cloud, testing, release, and operations.
Key Responsibilities
Lead the RMF and assessment-and-authorization strategy for PIEE systems and services.
Plan and coordinate security-control implementation, assessment, evidence, authorization packages, continuous monitoring, and POA&M management.
Maintain visibility into authorization status, material vulnerabilities, control deficiencies, remediation priorities, and residual risk.
Integrate cybersecurity requirements into architecture, development, DevSecOps pipelines, cloud environments, releases, and operational procedures.
Coordinate cybersecurity engineers, application vulnerability analysts, system stakeholders, assessors, Authorizing Official representatives, and delivery teams.
Ensure DISA STIGs, NIST controls, secure configuration, vulnerability findings, and remediation evidence are addressed and traceable.
Provide executive briefings, risk recommendations, metrics, and escalation of issues that could affect authorization or mission operations.
Required Qualifications
At least five years of RMF/NIST assessment-and-authorization experience.
DoD cybersecurity experience, including security-control assessment and authorization reviews for large or complex organizations.
Knowledge of emerging technologies and cloud security implications.
Active DoD Secret clearance and IT-II / Tier 3 eligibility, as required.
Preferred Qualifications
Direct DLA and/or PIEE RMF, cATO, or cybersecurity leadership experience.
Expertise with eMASS, NIST SP 800-53, DISA STIGs, POA&Ms, cloud authorization, software assurance, and continuous monitoring.
CISSP, CAP/CGRC, CCSP, or comparable advanced cybersecurity certification.
Experience integrating RMF evidence and security controls into Agile and DevSecOps delivery.
