Federal RMF Compliance Lead

Job Summary

Owning the Marketplace's security compliance posture, the fully remote ISSO/MARS-E Lead will manage the MARS-E suite lifecycle, oversee ATO artifacts and evidence quality, and coordinate with various stakeholders to ensure audit readiness and compliance with CMS governance.

Key Responsibilities

• Maintain and improve the Marketplace's security and privacy compliance posture through the MARS-E document suite and related evidence repositories
• Coordinate across multiple ADO ISSOs and system teams to standardize control implementations and ensure evidence quality
• Lead RMF execution activities, including categorization, control selection, implementation oversight, and continuous monitoring

Required Qualifications

• Bachelor's degree in cybersecurity, information systems, engineering, or equivalent experience
• 8-12+ years in cybersecurity risk/compliance; 5+ years of hands-on federal RMF/ATO work
• Demonstrated ability to manage control baselines and assessment artifacts using MARS-E/ARS-like overlays
• One senior security credential (e.g., CISSP, CISM, CAP) demonstrating breadth in governance/risk/control frameworks
• Must meet CMS background investigation requirements for contractor fitness/suitability prior to access