RMF Process Lead

Job Summary

Owning and governing the organization's Risk Management Framework processes, the full-time RMF Process Lead will manage the end-to-end RMF lifecycle, design standardized processes, and serve as the subject matter expert for a new GRC platform in a fully remote environment.

Key responsibilities

• Manage the RMF lifecycle, including system categorization, control selection, implementation, and continuous monitoring
• Assess and document current-state RMF processes and design standardized target-state workflows aligned with NIST and federal requirements
• Lead requirements-gathering sessions and coordinate solution testing, user acceptance testing, and training for the new RMF solution

Required qualifications

• Bachelor's degree in cybersecurity, information technology, information systems, engineering, business, or a related field
• Eight or more years of experience in cybersecurity governance, risk management, compliance, or RMF programs
• Expert knowledge of NIST RMF and relevant federal cybersecurity requirements
• Experience implementing or supporting enterprise GRC or RMF platforms
• Strong analytical skills and experience leading cross-functional teams in a highly regulated environment