RemoteLeaf Logo
Log in Sign up

RMF Assessment & Quality Assurance Lead (R-00189)

1 day, 12 hours ago
Anywhere
Full-time
Senior
QA Engineer
Cybersecurity
Apply Now
True Zero Technologies

True Zero Technologies

True Zero Technologies specializes in cybersecurity programs and software solutions, focusing on proactive defense and IT engineering services.

Internet Software & Services
11-50
Founded 2016
View All Jobs 22

Description

  • Lead quality assurance activities across the full Risk Management Framework (RMF) lifecycle.
  • Review SSPs, SARs, POA&Ms, control implementations, and authorization documentation for quality and completeness.
  • Validate assessment evidence before government or independent assessor review.
  • Coordinate assessment readiness with RMF analysts, ISSOs, system owners, security engineers, and other stakeholders.
  • Develop and maintain quality review checklists, documentation standards, and package review procedures.
  • Identify documentation gaps, control implementation issues, and process improvement opportunities before formal assessments.
  • Support Security Control Assessments, annual assessments, and authorization activities with independent assessors.
  • Verify remediation actions, POA&M updates, and corrective actions are accurately reflected in authorization packages.
  • Track assessment readiness metrics and recommend improvements to reduce rework and improve authorization quality.
  • Mentor RMF analysts and ISSOs on documentation quality, evidence standards, and authorization best practices.

Requirements

  • Bachelor’s degree in Cybersecurity, Information Systems, Information Technology, Computer Science, or a related field.
  • 5+ years of experience supporting Federal RMF, A&A, or cybersecurity governance programs.
  • Experience reviewing authorization packages for quality, completeness, and compliance with Federal cybersecurity requirements.
  • Strong knowledge of NIST RMF, NIST SP 800-37, NIST SP 800-53 Rev. 5, NIST SP 800-53A, and FISMA.
  • Experience supporting Security Control Assessments, annual assessments, continuous monitoring, and ongoing authorization.
  • Experience coordinating with ISSOs, System Owners, Security Control Assessors, and Authorizing Officials.
  • Excellent analytical, organizational, technical writing, and communication skills.
  • Preferred experience supporting NIH, HHS, or other Federal civilian agencies.
  • Preferred experience with JCAM, eMASS, ServiceNow GRC, or similar governance and compliance platforms.
  • Preferred experience with High Value Assets, cloud authorizations, or enterprise RMF programs.
  • Preferred familiarity with FedRAMP, common control inheritance, continuous monitoring, and Federal audit support.
  • Preferred experience developing authorization quality standards, review checklists, and documentation templates.
  • Preferred certifications include CGRC, CISSP, CAP, CISM, Security+, or PMP.

Benefits

  • Competitive salary paid twice per month.
  • Best-in-class medical coverage.
  • 100% of medical premiums covered by True Zero.
  • Company-wide new business incentive programs.
  • Contribution incentives for white papers, blog posts, and internal webinars.
  • 3 weeks of PTO plus 11 paid holidays annually.
  • 401(k) program with 100% company match on the first 4%.
  • Monthly reimbursement for cell phone and home internet costs.
  • Paternity and maternity leave.
  • Investment in training and certifications.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Climate First Bank

Quality Assurance Officer

Climate First Bank 51-250 Banks

Climate First Bank is hiring a Quality Assurance Officer to lead SBA loan quality control and compliance oversight for its lending department in a remote U.S.-based role.

United States Full-time Senior QA Engineer
12 hours, 30 minutes ago
Universal Martial Arts Academy

Manager, Governance, Risk & Compliance

Universal Martial Arts Academy Education Services

Ultimate Medical Academy is hiring a remote Manager, Governance, Risk & Compliance to lead its institution-wide GRC and information security programs in support of a national higher-education environment.

United States Full-time Lead Compliance Manager Security Analyst
$150k-$159k
Cybersecurity HIPAA Network Security Penetration Testing
12 hours, 45 minutes ago
Welo Global

Alpheratz Project - Indonesian (Indonesia) Translation Quality Rater

Welo Global Professional Services

Experienced language professionals are needed for an ongoing Indonesian (Indonesia) customer service content project focused on reviewing and refining machine-translated materials for accuracy and naturalness.

Indonesia Freelance Junior QA Engineer Translator
$13k-$13k
13 hours ago
Alpaca

Sr. Insider & Data Risk Analyst

Alpaca 51-250 Capital Markets

Alpaca is hiring a Senior Insider & Data Risk Analyst to lead insider risk investigations and strengthen data loss prevention and risk management across its global brokerage infrastructure.

Europe Full-time Senior Security Analyst
AWS Azure Cybersecurity Elasticsearch GCP Python SIEM Splunk SQL
1 day, 12 hours ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers