RMF/Assessment & Authorization Team Lead

SkyePoint Decisions•Bethesda, MD

20h•$135,000 - $165,000•Hybrid

About The Position

SkyePoint Decisions is seeking a RMF / Assessment & Authorization (A&A) Team Lead to serve as the senior cybersecurity lead responsible for planning, directing, and overseeing Risk Management Framework (RMF) activities across information systems. The Team Lead provides leadership to RMF analysts, ISSOs, system owners, and stakeholders to ensure systems achieve and maintain Authorization to Operate (ATO) status in accordance with FISMA, HHS, NIH, and NIST requirements. The position leads the development, review, and quality assurance of authorization packages, manages continuous monitoring activities, supports risk management initiatives, and acts as the primary cybersecurity advisor for RMF implementation and compliance efforts. This is a hybrid position located in Bethesda, MD.

Requirements

Bachelor's degree in Cybersecurity, Information Systems, Computer Science, Engineering, or related field.
Minimum 10 years of information security experience.
Minimum 5 years of experience leading RMF, A&A, or ISSO teams supporting Federal systems.
One of the following certifications: CISSP, CAP, CISM, CISA, CRISC, or Security +.
Demonstrated experience supporting FISMA-compliant environments.
Hands-on experience developing and reviewing complete ATO packages.
Expertise with: NIST RMF (SP 800-37), NIST SP 800-53 Rev.5, FISMA.
Strong written and verbal communication skills.
Must be able to pass a NIH background check and suitability clearance.
Must be a U.S. Citizen.

Nice To Haves

Active clearance preferred.
One of the following: CISSP, CAP, CISM, CISA, CRISC, Security +

Responsibilities

Lead and manage a team of RMF/A&A Analysts supporting NIH systems and applications.
Provide technical and operational oversight across all RMF lifecycle activities.
Establish project priorities, schedules, deliverables, and performance metrics.
Coordinate activities among system owners, ISSOs, security engineers, privacy officials, and government stakeholders.
Lead development and maintenance of authorization packages
Perform final quality reviews of all authorization documentation before submission to the Authorizing Official.
Serve as the primary point of contact for RMF and A&A activities.