RemoteLeaf Logo
Log in Sign up

RMF Process Lead (R-00177)

1 month ago
Anywhere
Full-time
Lead
Penetration Tester
Cybersecurity
Apply Now
True Zero Technologies

True Zero Technologies

True Zero Technologies specializes in cybersecurity programs and software solutions, focusing on proactive defense and IT engineering services.

Internet Software & Services
11-50
Founded 2016
View All Jobs 22

Description

  • Own and manage the end-to-end RMF lifecycle, including categorization, control selection, implementation, assessment, authorization, continuous monitoring, and system disposal.
  • Assess current-state RMF processes, workflows, roles, data requirements, dependencies, pain points, and approval paths.
  • Design and implement standardized target-state RMF processes aligned with NIST, federal agency, and organizational requirements.
  • Translate existing RMF workflows, business rules, security documentation, control data, and authorization activities into the new GRC or RMF platform.
  • Serve as the primary functional subject matter expert for the new RMF solution, including workflows, data model, configurations, reporting, and user capabilities.
  • Lead requirements-gathering sessions with system owners, ISSOs, ISSMs, assessors, authorizing officials, engineers, and compliance stakeholders.
  • Define functional requirements, user stories, acceptance criteria, workflow rules, role-based permissions, notifications, and approval processes.
  • Review and validate migration of system records, controls, assessment results, POA&Ms, authorization packages, evidence, and supporting documentation.
  • Identify process gaps, data-quality issues, control-mapping inconsistencies, and configuration deficiencies, and coordinate corrective actions.
  • Establish RMF governance standards, operating procedures, templates, process guides, decision points, and quality-control requirements.
  • Coordinate solution testing, user acceptance testing, process validation, defect resolution, and production-readiness activities.
  • Develop training materials and provide role-based training, demonstrations, and knowledge transfer for users of the new RMF solution.
  • Monitor RMF process performance, authorization timelines, control-assessment status, POA&M remediation, and continuous-monitoring activities.
  • Provide leadership with dashboards, status reports, risk summaries, implementation updates, and recommendations for process improvement.
  • Drive user adoption and continuous improvement by incorporating stakeholder feedback, regulatory changes, lessons learned, and emerging cybersecurity requirements.

Requirements

  • Bachelor’s degree in cybersecurity, information technology, information systems, engineering, business, or a related field.
  • 8 or more years of experience supporting cybersecurity governance, risk management, compliance, security authorization, or RMF programs.
  • Demonstrated experience leading or owning end-to-end RMF processes within a federal government or highly regulated environment.
  • Expert knowledge of NIST RMF, NIST SP 800-37, NIST SP 800-53, FIPS 199, FIPS 200, and continuous-monitoring requirements.
  • Experience translating current-state business processes into standardized target-state workflows within a new technology platform.
  • Experience implementing, configuring, migrating to, or supporting enterprise GRC or RMF platforms such as RegScale, ServiceNow GRC, RSA Archer, eMASS, Xacta, CSAM, or equivalent solutions.
  • Strong understanding of authorization packages, System Security Plans, security controls, assessment procedures, POA&Ms, risk assessments, and authorization decisions.
  • Experience facilitating process-mapping, requirements-gathering, solution-design, testing, and stakeholder-validation sessions.
  • Ability to translate technical, regulatory, and operational requirements into clear system configurations, workflows, and user procedures.
  • Strong analytical, documentation, presentation, communication, and stakeholder-management skills.
  • Experience leading cross-functional teams and coordinating with system owners, cybersecurity personnel, assessors, engineers, program managers, and executive leadership.
  • Ability to identify process risks, resolve competing requirements, and guide stakeholders toward standardized enterprise solutions.

Benefits

  • No benefits or perks were listed in the job posting.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

ZERO TO THREE

Policy Analyst

ZERO TO THREE 251-1K Diversified Consumer Services

ZERO TO THREE is hiring a Policy Analyst to advance its federal policy agenda on child care, family tax policy, and related issues in support of infants, toddlers, and families.

United States Full-time Junior Compliance Manager Program Manager
$65k-$75k
21 hours, 20 minutes ago
OLIVER

APAC Brand Manager

OLIVER 1K-5K Media

OLIVER, part of The Brandtech Group, is hiring an APAC Brand Manager in Gurgaon to coordinate foundational brand asset workstreams and regional stakeholder management across APAC.

India Full-time Senior Marketing Strategist Program Manager
CRM E-commerce
21 hours, 20 minutes ago
iSpot.tv

Technical Program Manager

iSpot.tv 251-1K Media

iSpot.tv is hiring a Technical Program Manager to drive core business system initiatives that connect sales, customer success, and marketing operations with technical systems.

United States Full-time Senior Program Manager
$105k-$125k
JIRA
1 day, 20 hours ago
OLIVER

Delivery Director

OLIVER 1K-5K Media

OLIVER is hiring a Delivery Director in Kuala Lumpur to lead APAC delivery transformation, operationalise client strategies, and scale delivery excellence across accounts and shared services.

Malaysia Full-time Lead Program Manager
Generative AI
1 day, 20 hours ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers