Risk Management Framework (RMF) Compliance Lead

Peraton•,

11d•$112,000 - $179,000•Remote

About The Position

Peraton is seeking a Risk Management Framework (RMF) Compliance Lead to manage and execute RMF activities and provide expert guidance and direction to a team of RMF professionals. The role oversees consistent implementation of security controls, policies, and procedures across DHRA systems and ensures RMF deliverables are accurate, complete, and high quality. The lead serves as the primary point of contact for RMF matters, coordinating with internal teams, leadership, and external stakeholders. The position also leads Authority to Operate (ATO) authorization and maintenance, including security control implementation, authorization package development, risk remediation, and continuous monitoring. This is a remote position, with required working hours of 8 a.m. to 5 p.m. EST.

Requirements

Must be a U.S. citizen and able to obtain and maintain the required Public Trust clearance.
One of the following education and experience combinations: bachelor's degree and 12 years of experience; master's degree and 10 years; associate degree and 14 years; or high school diploma or equivalent and 16 years.
At least one relevant certification: CISSP, CISM, CASP, CCISO, Security+, or CAP.
Proven experience supporting ATO authorization, maintenance, and continuous monitoring in FedRAMP High or other federal environments.
Expertise in RMF, including NIST SP 800-37 and NIST SP 800-53, and consistent implementation of security controls.
In-depth knowledge of information systems security principles, methodologies, and technologies, including operational requirements and cyber threats.
Familiarity with federal cybersecurity mandates, including FISMA and FedRAMP.
Ability to conduct thorough risk assessments, identify vulnerabilities, and develop actionable mitigation strategies aligned with organizational priorities.
Proficiency creating, reviewing, and validating RMF deliverables, including SSPs, SARs, and POA&Ms.
Skill in managing large-scale cybersecurity projects while meeting timelines, resource requirements, and organizational goals.

Responsibilities

Oversee and manage execution of RMF activities in accordance with NIST SP 800-37 and NIST SP 800-53.
Provide advanced RMF expertise to ensure consistent application of security controls, policies, and procedures across DHRA systems.
Lead and mentor RMF professionals and ensure high-quality System Security Plans (SSPs), Security Assessment Reports (SARs), and Plans of Action and Milestones (POA&Ms).
Ensure the accuracy, quality, and completeness of RMF deliverables and drive continuous improvement and compliance.
Serve as the primary point of contact for RMF matters and facilitate communication among internal teams, leadership, and external stakeholders.
Ensure RMF activities comply with applicable regulations, policies, and guidelines and maintain a secure operational posture.
Oversee integration of RMF processes across the organization, identify areas for improvement, and foster cybersecurity awareness and compliance.
Lead ATO authorization and maintenance, including security control implementation, authorization package development, risk remediation, and continuous monitoring.

Benefits

Medical benefits
Dental insurance
Vision insurance
Life insurance
Health savings account
Short- and long-term disability
Employee assistance program (EAP)
Parental leave
401(k)
Paid time off (PTO) for vacation
Company-paid holidays
Depending on the position, eligibility for overtime, shift differential, and a discretionary bonus