RMF & FedRAMP Security Controls Lead

Dovel Technologies, Inc; McLean (VA); Hybrid; USD 120,000 - 180,000; Full time

Benefits offered by this job

Medical, Rx, Dental & Vision Insurance

401(k) Retirement Plan

Paid Holidays

Job summary

Guidehouse is seeking a cybersecurity professional to lead and support RMF and A&A documentation, including SSPs, SARs, and POA&Ms, across on-premise and cloud platforms. The role supports cATO goals through automated control validation and evidence workflows.

The candidate will collaborate with System Owners, ISSOs, IAMs, and third-party assessors, applying NIST RMF, FedRAMP, OSCAL standards and supporting continuous monitoring in multi-tenant environments. Travel up to 10% may be required.

Qualifications

• Active and CURRENT Federal or DoD Public Trust is required.
• Seven years of relevant cybersecurity experience with Bachelor's, or Five years with Master's.
• Experience with NIST SP 800-37, 800-53, FISMA, and FedRAMP; Security+ or CAP is preferred.
• Excellent verbal and written communication skills, particularly in report writing.

Responsibilities

• Lead and/or support RMF and A&A documentation (SSPs, control matrices, SARs, POA&Ms, risk acceptance materials).
• Support authorization of on-premise and cloud services leveraging FedRAMP packages and readiness assessments.
• Interpret and apply FISMA, NIST RMF, FedRAMP, and OSCAL standards to guide enhancements and automation within a GRC platform.
• Ensure consistency and compliance across multi-tenant environments and support continuous monitoring.
• Collaborate with Agile teams to embed RMF discipline and validate modernization activities.
• Coordinate A&A activities with System Owners, ISSOs, IAMs, and third-party assessors to reduce manual workload.

Skills

Security+ or CAP

NIST RMF knowledge

FedRAMP knowledge

Strong report writing

Education

Bachelor's Degree (ACTIVE DoD Public Trust)

Master's Degree

Tools

ServiceNow

GRC platforms

Job description

Guidehouse is seeking a cybersecurity professional to lead and support RMF and A&A documentation, including SSPs, SARs, and POA&Ms, across on-premise and cloud platforms. The role supports cATO goals through automated control validation and evidence workflows.

The candidate will collaborate with System Owners, ISSOs, IAMs, and third-party assessors, applying NIST RMF, FedRAMP, OSCAL standards and supporting continuous monitoring in multi-tenant environments. Travel up to 10% may be required.