RemoteLeaf Logo
Log in Sign up

RMF, Security & ATO Manager

1 day, 23 hours ago
United States
Full-time
Senior
Penetration Tester
Cybersecurity
DevSecOps HIPAA
Apply Now
Lever

Lever

Lever is a leading Talent Acquisition Suite that provides modern hiring and talent management solutions. Their applicant tracking system (ATS) with candidate relationship management capabilities empowers hiring teams to streamline recruiting efforts an...

Professional Services
251-1K
Founded 2012
$123M raised
View All Jobs 6

Description

  • Own and maintain the Authority to Operate (ATO) and related documentation for the platform.
  • Manage the full NIST SP 800-37 Rev. 2 RMF lifecycle, including categorization, control selection, implementation, assessment, authorization, and continuous monitoring.
  • Author and maintain the System Security Plan (SSP), POA&M, and all ATO documentation in eMASS.
  • Serve as the primary liaison with the VA ISSO, Security Controls Assessor, and Authorizing Official.
  • Maintain HSPD-12/PIV compliance and VA IAM/MPI integration, and ensure personnel access meets PIV requirements within 10 business days of award.
  • Coordinate FISMA and HIPAA compliance controls across tenant applications and manage control inheritance documentation for sub-authorizations.
  • Lead Fortify, Nessus, and continuous compliance monitoring efforts and partner with DevSecOps to enforce ATO controls in the pipeline.
  • Maintain the Incident Response Plan (IRP) and Disaster Recovery Plan (DRP), and lead annual tabletop exercises.
  • Maintain the Policy Change Register and distribute VA policy, NIST guidance, and TRM updates within 24 hours of receipt.

Requirements

  • 7+ years of federal cybersecurity/RMF experience with hands-on ATO ownership on a VA or federal health IT system.
  • Expert-level knowledge of NIST SP 800-53 Rev. 5 and NIST SP 800-37 Rev. 2.
  • Direct eMASS experience, including SSP authoring, control implementation statements, and POA&M management.
  • PIV/HSPD-12 compliance experience and FICAM architecture experience.
  • Experience mapping HIPAA Security Rule controls to NIST 800-53 families.
  • Active Department of Veterans Affairs PIV credentials.
  • US citizenship is required.
  • Must have physically resided in the United States for a minimum of 3 years due to background investigation requirements.
  • Applicants selected will be subject to a security investigation and may need access to protected and/or classified information.
  • CISSP certification (preferred).
  • CAP (Certified Authorization Professional) certification (preferred).
  • Prior VA OIT ATO experience (preferred).
  • Experience with VA CDM, SNOWCAM, or other VA continuous monitoring tooling (preferred).
  • Experience with multi-tenant tiered authorization or system-of-systems ATOs (preferred).

Benefits

  • Medical, vision, and dental coverage.
  • Paid vacation and sick time.
  • Paid federal holidays.
  • 401(k) retirement plan with 100% company matching.
  • Employer-paid life insurance.
  • Continued education assistance.
  • Employee Assistance Program (EAP).
  • Commuter benefits program.
  • Health Savings Account (HSA).

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Reddit

Principal Technical Program Manager, Developer Productivity

Reddit 1K-5K Internet Software & Services

Reddit is hiring a Principal Technical Program Manager, Developer Productivity to lead company-wide AI-assisted engineering programs that make AI-native development safe, measurable, scalable, and effective.

United States Full-time Lead Program Manager
$261k-$365k
CI/CD LLM Machine Learning
22 hours, 30 minutes ago
K

Head of Ground Integration, Top Secret Clearance

K2 Space Corporation 51-200 Defense and Space Manufacturing

K2 Space is hiring a leader to build and integrate end-to-end ground systems for its satellite constellations across commercial, science, and national security missions.

United States Full-time Lead Program Manager
$200k-$250k
C# CI/CD Docker Go Java Kubernetes .NET Python
22 hours, 45 minutes ago
Olsson

Texas Water/Wastewater Leader

Olsson 1K-5K Construction & Engineering

Olsson is seeking a Water/Wastewater Leader in Texas to oversee team operations, client service, project performance, and business growth for its water and wastewater practice.

United States Full-time Lead Operations Manager Program Manager
23 hours ago
Modern Health

Program Manager, Business & Partnership Programs

Modern Health 251-1K Health Care Providers & Services

Modern Health is seeking a Program Manager to drive cross-functional business and partnership programs supporting internal teams and external health partners in a fully remote, high-growth environment.

United States Full-time Junior Program Manager
$109k-$150k
23 hours ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers