RMF/GRC Program Lead

Job Summary

Overseeing the organization's Risk Management Framework (RMF) and Governance, Risk, and Compliance (GRC) initiatives, the full-time RMF/GRC Program Lead will develop and maintain security policies, conduct risk assessments, and report compliance metrics to senior leadership in a remote setting.

Key responsibilities

• Lead the RMF and GRC programs, ensuring compliance with regulatory and organizational requirements
• Develop and maintain security policies, procedures, and controls to meet industry standards
• Coordinate audits and report risk status and compliance metrics to senior leadership

Required qualifications

• Bachelor's degree in Information Security, Risk Management, or a related field; Master's or MBA preferred
• Minimum 6 years of experience in GRC, risk management, or compliance leadership roles
• Certifications such as CISM, CRISC, CGRC (CAP), or CISA
• Expertise in regulatory frameworks (NIST, ISO 27001, FedRAMP, etc.) and risk management methodologies