Senior Cybersecurity & GRC Lead — RMF & DoD Ops

Chameleon Integrated Services; Linthicum (MD); On-site; USD 140,000 - 190,000; Full time

Benefits offered by this job

Health insurance (dental)

Vision plan (100% paid)

401K with company match

Life insurance (100% paid)

Disability insurance (100% paid)

Training allowance

PTO

Job summary

Chameleon Integrated Services seeks an ISSM / Senior Cybersecurity & GRC Lead to serve as the primary cybersecurity advisor to the Government Program Manager. You will oversee the enterprise RMF package and coordinate GRC efforts across live cyber operations.

This role requires deep experience with RMF, eMASS, SSPs, POA&M, and automated ATO processes, plus leadership of ISSOs and technical assessors to meet DoD mandates. U.S.

Qualifications

• Proven track record implementing the RMF lifecycle and submitting packages through eMASS.
• Experience writing or consolidating SSPs, POA&M, and STIGs.
• Experience advising an AO or senior government PM on risk boundaries.
• Deep knowledge of operational cybersecurity workflows including penetration testing, threat hunting, and incident response.

Responsibilities

• Manage the enterprise RMF package and ensure system compliance.
• Lead continuous monitoring and Get-Well authoring for new systems.
• Prepare SSPs, Security Assessment Plans, and eMASS submissions.
• Track POA&M and provide risk acceptance recommendations to the AO.
• Drive automation from ATO to continuous ATO (cATO).
• Coordinate ISSOs and assessors.
• Interface with live cyber operations for scans, patching, IaC, and incident response.

Skills

RMF lifecycle

eMASS

SSP writing

Risk advisory

Incident response

Tools

eMASS

POA&M

SSP docs

Job description

Chameleon Integrated Services seeks an ISSM / Senior Cybersecurity & GRC Lead to serve as the primary cybersecurity advisor to the Government Program Manager. You will oversee the enterprise RMF package and coordinate GRC efforts across live cyber operations.

This role requires deep experience with RMF, eMASS, SSPs, POA&M, and automated ATO processes, plus leadership of ISSOs and technical assessors to meet DoD mandates. U.S.