Risk Management Framework (RMF) Compliance Lead

Peraton; Lacey (WA); Remote; USD 140,000 - 180,000; Full time

Job summary

Peraton is seeking a Risk Management Framework (RMF) Compliance Lead to drive the end-to-end RMF lifecycle, including ATO authorization, continuous monitoring, and deliverables such as SSPs, SARs, and POA&Ms. You will lead a team of RMF professionals, ensuring high-quality documentation and strong cross-team collaboration.

The role requires strong RMF expertise, relevant certifications, and deep knowledge of NIST standards.

Qualifications

• U.S. citizen with ability to obtain Public Trust clearance
• Bachelor's degree and 12+ years, Master's degree and 10+ years, Associate's degree and 14+ years, or HS diploma/equivalent with 16+ years of experience
• One or more relevant certifications: CISSP, CISM, CASP, CCISO, Security+, or CAP
• Proven experience supporting Authority to Operate (ATO) in FedRAMP High or other federal environments
• RMF knowledge to implement controls per NIST SP 800-37/800-53

Responsibilities

• Oversee and manage RMF activities ensuring adherence to NIST SP 800-37/800-53
• Provide advanced RMF process expertise to ensure consistent controls across systems
• Lead and mentor RMF professionals delivering SSPs, SARs, and POA&Ms
• Ensure deliverables are accurate, complete, and compliant
• Act as main point of contact for RMF-related matters with internal and external stakeholders
• Maintain secure operational posture and compliance with regulations
• Identify improvement areas and foster cybersecurity awareness
• Lead ATO authorization and maintenance including risk remediation and continuous monitoring

Skills

RMF expertise

NIST SP 800-37/800-53

risk assessments

security controls

leadership

documentation (SSP/SAR/POA&Ms)

Education

Bachelor's Degree or higher

Job description

Basic Qualifications:

• Must be a U.S. Citizen with the ability to obtain and maintain the required Public Trust level clearance
• Bachelor's Degree and 12 years, a Master's Degree and 10 years, an Associate's Degree and 14 years, or a High School Diploma or equivalent and 16 years of experience
• One or more of the following relevant certifications: CISSP, CISM, CASP, CCISO, Security+, or CAP
• Proven experience supporting Authority to Operate (ATO) authorization, maintenance, and continuous monitoring within FedRAMP High or other federal environments
• Expertise in the Risk Management Framework (RMF), including NIST SP 800-37 and NIST SP 800-53, to ensure consistent implementation of security controls.
• In-depth knowledge of information systems security principles, methodologies, and technologies, including operational requirements and cyber threats.
• Familiarity with federal cybersecurity mandates, including FISMA and FedRAMP
• Ability to perform thorough risk assessments, identify vulnerabilities, and provide actionable mitigation strategies aligned with organizational priorities.
• Proficient in creating, reviewing, and validating RMF deliverables, such as System Security Plans (SSPs), Security Assessment Reports (SARs), and POA&Ms.
• Skilled in managing large-scale cybersecurity projects, ensuring adherence to timelines, resources, and organizational goals.

Preferred Qualifications:

• Active Secret Clearance
• Experience with continuous ATO or automated control evidence

Peraton is seeking a Risk Management Framework (RMF) Compliance Lead. This person will be responsible for the overall management and execution of the Risk Management Framework (RMF) tasks, providing expert guidance and direction to a team of RMF professionals.

Work Location

This is a remote position, but candidate must be willing to work during the hours of 8am - 5pm EST

This position is contingent upon contract award

What You’ll Do:

• Oversee and manage the overall execution of the Risk Management Framework (RMF) activities, ensuring adherence to established principles and standards (NIST SP 800-37 and 800-53).
• Provide advanced expertise on RMF processes to ensure consistent application of security controls, policies, and procedures across all supported systems.
• Lead and mentor a team of RMF professionals, ensuring the delivery of high-quality documentation and outputs such as System Security Plans (SSPs), Security Assessment Reports (SARs), and Plans of Action and Milestones (POA&Ms).
• Ensure the accuracy, quality, and completeness of all deliverables related to the RMF process, driving continuous improvement and compliance.
• Act as the primary point of contact for all RMF-related matters, facilitating communication between internal teams, leadership, and external stakeholders.
• Ensure that all RMF activities comply with relevant regulations, policies, and guidelines, maintaining a secure operational posture.
• Oversee the integration of RMF processes across the organization, identifying areas for improvement and fostering a culture of cybersecurity awareness and compliance.
• Lead Authority to Operate (ATO) authorization and maintenance, including security control implementation, authorization package development, risk remediation, and continuous monitoring.