RMF Process Lead

Responsibilities

• Own and manage the end-to-end RMF lifecycle including categorization, control selection, assessment, and authorization
• Design and implement standardized target-state RMF processes aligned with NIST and federal requirements
• Translate existing RMF workflows and security documentation into new GRC or RMF platforms
• Serve as the primary functional subject matter expert for new RMF solutions, configurations, and reporting
• Lead requirements-gathering sessions with system owners, ISSOs, ISSMs, and compliance stakeholders
• Define functional requirements, user stories, acceptance criteria, and workflow rules
• Establish RMF governance standards, operating procedures, templates, and quality-control requirements
• Coordinate solution testing, user acceptance testing, and production-readiness activities
• Develop training materials and provide role-based training and knowledge transfer
• Monitor RMF process performance, authorization timelines, and POA&M remediation

Requirements

• Bachelor's degree in cybersecurity, IT, information systems, engineering, or business
• 8+ years of experience in cybersecurity governance, risk management, compliance, or RMF programs
• Demonstrated experience leading end-to-end RMF processes in federal or highly regulated environments
• Expert knowledge of NIST RMF, NIST SP 800-37, NIST SP 800-53, FIPS 199, and FIPS 200
• Experience with enterprise GRC or RMF platforms such as RegScale, ServiceNow GRC, RSA Archer, eMASS, Xacta, or CSAM
• Strong understanding of System Security Plans, security controls, assessment procedures, and POA&Ms
• Proven ability to facilitate process-mapping, requirements-gathering, and stakeholder-validation sessions
• Strong analytical, documentation, and stakeholder-management skills

About the Company

True Zero Technologies is a veteran-owned small business dedicated to the purposeful enablement of people and technology. Recognized as a Best Place to Work and an Inc. 5000 fastest-growing company, True Zero focuses on delivering top-tier services through a people-first approach.