Hybrid Senior Cybersecurity & RMF Compliance Lead

Cybersecurity Jobs; Maryland; Hybrid; USD 120,000 - 160,000; Full time

Job summary

VMD Corp in Annapolis Junction, MD is seeking a Senior Cybersecurity Specialist for a hybrid role. You will deliver security and compliance leadership across IT projects, strengthen posture through RMF-aligned documentation, and support mission outcomes with defensible assessment artifacts.

You will lead risk assessments, identify vulnerabilities, and develop control procedures for RMF families, translating NIST requirements into actionable plans and reporting to executives.

Qualifications

• Active CISSP or CISM certification.
• 10+ years of cybersecurity and compliance experience.
• Bachelor’s degree or equivalent experience.
• US Citizenship and Secret clearance.

Responsibilities

• Lead and actively participate in meetings to review and assess system and technology compliance.
• Perform risk assessments using Federal guidance and industry best practices.
• Support teams in identifying vulnerabilities and providing recommendations to reduce cybersecurity risk.
• Develop and mature control-specific procedures for RMF control families by interpreting NIST requirements, identifying system-specific implementation needs, and producing procedural documentation that supports mission operations and defensible compliance.
• Articulate and report on cybersecurity risk and compliance to executives and senior leaders.
• Apply technical and control-based understanding of vulnerability details to create actionable remediation plans and mitigation strategies.
• Create, maintain, and track POA&Ms, working with system owners and technical teams to document corrective actions, mitigations, monitor progress, and support timely closure of security findings.
• Support remediation of control-based POA&Ms by analyzing control weaknesses, recommending corrective actions or mitigations, coordinating with technical teams, and reviewing closure evidence.
• Author A&A documentation to build foundational RMF documentation supporting system authorization.
• Continually improve the cybersecurity risk assessment and POA&M process across the program.
• Aggregate and track cybersecurity POA&Ms and risks across projects, teams, and programs.
• Serve as a key incident response team member by responding to and triaging security incidents.
• Communicate cybersecurity best practices based on policies, standards, and controls.

Skills

Leadership & interpersonal skills

Effective writing skills

Customer relationship building

Collaboration across stakeholders

Attention to detail

Education

Bachelor's degree

Job description

VMD Corp in Annapolis Junction, MD is seeking a Senior Cybersecurity Specialist for a hybrid role. You will deliver security and compliance leadership across IT projects, strengthen posture through RMF-aligned documentation, and support mission outcomes with defensible assessment artifacts.

You will lead risk assessments, identify vulnerabilities, and develop control procedures for RMF families, translating NIST requirements into actionable plans and reporting to executives.