Senior Information Security Lead - RMF, Compliance & Risk

PEMCCO, Inc.; Washington (District of Columbia); On-site; USD 70,000 - 115,000; Full time

Benefits offered by this job

Medical Insurance

Dental Insurance

Vision Insurance

Paid Time Off

Paid Holidays

Employee Assistance Program

Job summary

PEMCCO, Inc. is seeking a Senior Information Security Specialist to lead security, compliance, risk management, and authorization activities for government information systems and networks.

You will guide RMF efforts, assess risk, and help maintain a strong, compliant security posture across complex environments. You will collaborate with program leadership, engineers, admins, developers, and government stakeholders to ensure cybersecurity requirements are implemented throughout the system

Qualifications

• Bachelor's degree in Cybersecurity, Information Assurance, Information Systems, Information Technology, Computer Science, Engineering, or a related field.
• Ten (10) years of experience in information assurance, information security, cybersecurity, system security, RMF, compliance, or a related field.
• Advanced knowledge of information assurance and information protection principles.
• Advanced knowledge of RMF processes and security authorization requirements.
• Knowledge of NIST, DoD, and federal cybersecurity policies, standards, and regulations.
• Ability to lead cybersecurity efforts and coordinate activities among multiple stakeholders.
• Ability to obtain and maintain a government security clearance if required.

Responsibilities

• Lead information system security activities throughout the system lifecycle.
• Manage and support RMF and A&A processes.
• Develop, review, and maintain SSPs, SARs, POA&Ms, and related cybersecurity documentation.
• Conduct security assessments, compliance reviews, vulnerability analyses, and risk assessments.
• Evaluate security controls and recommend corrective actions and improvements.
• Identify, document, track, and support remediation of vulnerabilities and deficiencies.
• Provide guidance to leadership on risk, compliance, and security best practices.
• Support incident response activities, investigations, and remediation.

Skills

RMF processes

Information security

Risk assessment

Security documentation

Vulnerability management

Compliance oversight

Incident response

Stakeholder coordination

Government clearance

DoD policies

Education

Bachelor's degree in Cybersecurity/Info Assurance

Master's degree (preferred)

Job description

PEMCCO, Inc. is seeking a Senior Information Security Specialist to lead security, compliance, risk management, and authorization activities for government information systems and networks.

You will guide RMF efforts, assess risk, and help maintain a strong, compliant security posture across complex environments. You will collaborate with program leadership, engineers, admins, developers, and government stakeholders to ensure cybersecurity requirements are implemented throughout the system