RMF Process Lead

Position Responsibilities:

• Own and manage the end-to-end RMF lifecycle, including system categorization, control selection, implementation, assessment, authorization, continuous monitoring, and system disposal.
• Assess current-state RMF processes, workflows, roles, and data requirements, then design and implement standardized target-state processes aligned with NIST and federal agency requirements.
• Serve as the primary functional subject matter expert for the new RMF solution, including workflows, data model, configurations, and user capabilities, while leading requirements-gathering sessions with stakeholders.

Position Qualifications:

• Bachelor’s degree in cybersecurity, information technology, or a related field, plus eight or more years of experience supporting cybersecurity governance, risk management, or RMF programs.
• Expert knowledge of NIST RMF, NIST SP 800-37, NIST SP 800-53, FIPS 199, and continuous-monitoring requirements.
• Experience implementing, configuring, or migrating to enterprise GRC or RMF platforms such as RegScale, ServiceNow GRC, RSA Archer, eMASS, Xacta, or equivalent.

Role Summary:

• The RMF Process Lead will own and govern the organization’s Risk Management Framework processes and lead the transition from current-state workflows to a modernized target-state solution.
• This role requires deep knowledge of federal cybersecurity requirements, security authorization processes, and enterprise GRC platforms.
• The RMF Process Lead will serve as the functional subject matter expert, translate existing processes into optimized workflows, and ensure consistent adoption across teams.