Cybersecurity / RMF Lead
Must-have:CloudAISecurityLead
Your tasks
Position Summary Leads cybersecurity governance, RMF assessment and authorization, continuous authorization, control evidence, vulnerability risk management, and security integration across architecture, development, cloud, testing, release, and operations.
- Lead the RMF and assessment-and-authorization strategy for PIEE systems and services.
- Plan and coordinate security-control implementation, assessment, evidence, authorization packages, continuous monitoring, and POA&M management.
- Maintain visibility into authorization status, material vulnerabilities, control deficiencies, remediation priorities, and residual risk.
- Integrate cybersecurity requirements into architecture, development, DevSecOps pipelines, cloud environments, releases, and operational procedures.
- Coordinate cybersecurity engineers, application vulnerability analysts, system stakeholders, assessors, Authorizing Official representatives, and delivery teams.
- Ensure DISA STIGs, NIST controls, secure configuration, vulnerability findings, and remediation evidence are addressed and traceable.
- Provide executive briefings, risk recommendations, metrics, and escalation of issues that could affect authorization or mission operations.
Requirements
Required Qualifications
- At least five years of RMF/NIST assessment-and-authorization experience.
- DoD cybersecurity experience, including security-control assessment and authorization reviews for large or complex organizations.
- Knowledge of emerging technologies and cloud security implications.
- Active DoD Secret clearance and IT-II / Tier 3 eligibility, as required.
Preferred Qualifications
- Direct DLA and/or PIEE RMF, cATO, or cybersecurity leadership experience.
- Expertise with eMASS, NIST SP 800-53, DISA STIGs, POA&Ms, cloud authorization, software assurance, and continuous monitoring.
- CISSP, CAP/CGRC, CCSP, or comparable advanced cybersecurity certification.
- Experience integrating RMF evidence and security controls into Agile and DevSecOps delivery.