Federal RMF Security Lead (NIST/HIPAA)

A-P-Ventures-LL; United States; Remote; USD 140,000 - 190,000; Full time

Job summary

APV is seeking a mission-driven Security Manager to oversee a large federal healthcare technology program. You will lead cybersecurity, compliance, risk management, continuous monitoring, incident response, and governance across complex federal information systems.

The role requires 8+ years of information security experience, with deep RMF/800-53 knowledge and CMS/FedRAMP familiarity. U.S. work authorization and high-trust access are required for program participation.

Qualifications

• Requires 8+ years in information security/cybersecurity with 3+ years leading security for complex systems.
• Knowledge of RMF, NIST SP 800-53, FISMA, continuous monitoring, and risk management.
• Ability to obtain and maintain High-Risk Public Trust and U.S. work authorization.

Responsibilities

• Lead security strategy, compliance, risk management, and continuous monitoring for federal systems.
• Maintain ATO documentation, security artifacts, assessments, and authorization support packages.
• Oversee vulnerability management, POA&M development, remediation tracking, and security reporting.
• Coordinate security assessments, audits, penetration testing, and continuous monitoring.
• Ensure compliance with NIST RMF, NIST SP 800-53, FISMA, HIPAA, CMS requirements, and federal standards.
• Support incident response, threat management, and security operations activities.
• Collaborate with architects, DevSecOps, developers, and government stakeholders to integrate controls.
• Own the System Security Plan, security control assessments, and ATO package including reauthorization.
• Manage POA&M lifecycle end-to-end with monthly government reporting.
• Apply CMS ARS and HIPAA controls to AWS cloud environments.
• Coordinate independent assessments and ensure security evidence is pipeline-automated.

Skills

Security leadership

RMF & 800-53

Vulnerability management

Security assessments & POA&M

Incident response

Government stakeholder coordination

Education

Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, or related discipline

Tools

CMS ARS

FedRAMP

Job description

APV is seeking a mission-driven Security Manager to oversee a large federal healthcare technology program. You will lead cybersecurity, compliance, risk management, continuous monitoring, incident response, and governance across complex federal information systems.

The role requires 8+ years of information security experience, with deep RMF/800-53 knowledge and CMS/FedRAMP familiarity. U.S. work authorization and high-trust access are required for program participation.