Risk Management Framework (RMF) Compliance Lead

Peraton; Reston (VA); Remote; USD 112,000 - 179,000; Full time

Benefits offered by this job

Remote work available

Health benefits

Job summary

Peraton is seeking a Risk Management Framework (RMF) Compliance Lead to oversee RMF activities across DHRA systems, delivering SSPs, SARs, and POA&Ms, while mentoring a team. This remote role requires U.S. citizenship with the ability to obtain Public Trust and availability 8am–5pm EST.

You will ensure RMF artifacts meet NIST SP 800-37/53, manage ATO, and drive continuous monitoring and security controls, partnering with internal teams to maintain secure operations.

Qualifications

• Must be a U.S. Citizen with the ability to obtain and maintain the required Public Trust level clearance.
• Bachelor's degree and 12 years, a Masters Degree and 10 years, an Associates Degree and 14 years, or a High School Diploma or equivalent and 16 years of experience.
• One or more of the following relevant certifications: CISSP, CISM, CASP, CCISO, Security+, or CAP.
• Proven experience supporting Authority to Operate (ATO) authorization, maintenance, and continuous monitoring within FedRAMP High or other federal environments.
• Expertise in the RMF, including NIST SP 800-37 and NIST SP 800-53, to ensure consistent implementation of security controls.
• In-depth knowledge of information systems security principles, methodologies, and technologies, including operational requirements and cyber threats.
• Familiarity with federal cybersecurity mandates, including FISMA and FedRAMP
• Ability to perform thorough risk assessments, identify vulnerabilities, and provide actionable mitigation strategies aligned with organizational priorities.
• Proficient in creating, reviewing, and validating RMF deliverables, such as SSPs, SARs, and POA&Ms.
• Skilled in managing large-scale cybersecurity projects, ensuring adherence to timelines, resources, and organizational goals.

Responsibilities

• Oversee and manage the overall execution of RMF activities, ensuring adherence to established principles and standards (NIST SP 800-37 and 800-53).
• Provide advanced expertise on RMF processes to ensure consistent application of security controls, policies, and procedures across all DHRA systems.
• Lead and mentor a team of RMF professionals, ensuring the delivery of high-quality documentation and outputs such as SSPs, SARs, and POA&Ms.
• Ensure the accuracy, quality, and completeness of all deliverables related to the RMF process, driving continuous improvement and compliance.
• Act as the primary point of contact for all RMF-related matters, facilitating communication between internal teams, leadership, and external stakeholders.
• Ensure that all RMF activities comply with relevant regulations, policies, and guidelines, maintaining a secure operational posture.
• Oversee the integration of RMF processes across the organization, identifying areas for improvement and fostering a culture of cybersecurity awareness and compliance.
• Lead Authority to Operate (ATO) authorization and maintenance, including security control implementation, authorization package development, risk remediation, continuous monitoring

Skills

RMF

Security frameworks

Leadership

FedRAMP

NIST RMF

Education

Bachelor's degree

Master's degree

Associate degree

High school diploma

Job description

Risk Management Framework (RMF) Compliance Lead

Job Locations

US

Peraton Overview

Peraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world's leading mission capability integrator and transformative enterprise IT provider, we deliver trusted, highly differentiated solutions and technologies to protect our nation and allies. Peraton operates at the critical nexus between traditional and nontraditional threats across all domains: land, sea, space, air, and cyberspace. The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Each day, our employees do the can't be done by solving the most daunting challenges facing our customers. Visit peraton.com to learn how we're keeping people around the world safe and secure.

Responsibilities

Peraton is seeking a Risk Management Framework (RMF) Compliance Lead. This person will be responsible for the overall management and execution of the Risk Management Framework (RMF) tasks, providing expert guidance and direction to a team of RMF professionals.

Work Location: This is a remote position, but candidate must be willing to work during the hours of 8am - 5pm EST

What You'll Do:

• Oversee and manage the overall execution of the Risk Management Framework (RMF) activities, ensuring adherence to established principles and standards (NIST SP 800-37 and 800-53).
• Provide advanced expertise on RMF processes to ensure consistent application of security controls, policies, and procedures across all DHRA systems.
• Lead and mentor a team of RMF professionals, ensuring the delivery of high-quality documentation and outputs such as System Security Plans (SSPs), Security Assessment Reports (SARs), and Plans of Action and Milestones (POA&Ms).
• Ensure the accuracy, quality, and completeness of all deliverables related to the RMF process, driving continuous improvement and compliance.
• Act as the primary point of contact for all RMF-related matters, facilitating communication between internal teams, leadership, and external stakeholders.
• Ensure that all RMF activities comply with relevant regulations, policies, and guidelines, maintaining a secure operational posture.
• Oversee the integration of RMF processes across the organization, identifying areas for improvement and fostering a culture of cybersecurity awareness and compliance.
• Lead Authority to Operate (ATO) authorization and maintenance, including security control implementation, authorization package development, risk remediation, continuous monitoring

Qualifications

Basic Qualifications:

• Must be a U.S. Citizen with the ability to obtain and maintain the required Public Trust level clearance
• Bachelors Degree and 12 years, a Masters Degree and 10 years, an Associates Degree and 14 years, or a High School Diploma or equivalent and 16 years of experience
• One or more of the following relevant certifications: CISSP, CISM, CASP, CCISO, Security+, or CAP
• Proven experience supporting Authority to Operate (ATO) authorization, maintenance, and continuous monitoring within FedRAMP High or other federal environments
• Expertise in the Risk Management Framework (RMF), including NIST SP 800-37 and NIST SP 800-53, to ensure consistent implementation of security controls.
• In-depth knowledge of information systems security principles, methodologies, and technologies, including operational requirements and cyber threats.
• Familiarity with federal cybersecurity mandates, including FISMA and FedRAMP
• Ability to perform thorough risk assessments, identify vulnerabilities, and provide actionable mitigation strategies aligned with organizational priorities.
• Proficient in creating, reviewing, and validating RMF deliverables, such as System Security Plans (SSPs), Security Assessment Reports (SARs), and POA&Ms.
• Skilled in managing large-scale cybersecurity projects, ensuring adherence to timelines, resources, and organizational goals.

Target Salary Range

$112,000 - $179,000. This represents the typical salary range for this position. Salary is determined by various factors, including but not limited to, the scope and responsibilities of the position, the individual's experience, education, knowledge, skills, and competencies, as well as geographic location and business and contract considerations. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay.

Benefits Statement

Peraton offers eligible employees a variety of benefits including medical, dental, vision, life, health savings account, short/long term disability, EAP, parental leave, 401(k), paid time off (PTO) for vacation, and company paid holidays. A full listing of available benefits can be viewed at https://www.careers.peraton.com/benefits.

EEO

EEO: Equal opportunity employer, including disability and protected veterans, or other characteristics protected by law.