RMF and Authorization Lead

United StatesHybridlead

OtherLead

0 views0 saves0 applied

Apply Now

Quick Summary

Overview

Empower, Innovate, Impact! At Team A-TEK, we EMPOWER people to drive INNOVATION that IMPACTS mission!

Technical Tools

OtherLead

Requirements

~1 min read

Demonstrated experience leading Federal RMF and A&A activities of comparable scope and complexity.
Knowledge of NIST SP 800-37, NIST SP 800-53, NIST SP 800-53A, FISMA, and Federal continuous monitoring requirements.
Experience developing and maintaining Federal authorization packages.
Experience supporting independent security assessments, POA&M management, and risk-based decisions.
Strong technical writing, stakeholder coordination, and quality review skills.
Ability to support hybrid work requirements in the Washington, DC metropolitan area or Research Triangle area.
Education and experience that satisfy the proposed GSA labor category.

Experience supporting HHS or another Federal health agency.
Experience using JCAM or a comparable Federal GRC platform.
Experience supporting cloud security, FedRAMP, inherited controls, and shared responsibility analysis.
Experience coordinating multiple concurrent authorization, assessment, and continuous monitoring activities.
CISSP, CAP/CGRC, CISM, Security+, or an applicable cloud security certification.

Responsibilities

~1 min read

→Lead RMF activities across three primary authorization boundaries and the associated system inventory.
→Maintain SSPs, SARs, POA&Ms, Executive Summaries, ATO documentation, and supporting evidence.
→Coordinate three annual security control assessments and prepare evidence for the independent assessor.
→Maintain assessor independence and avoid acting as the assessor of record unless the agency expressly authorizes an activity.
→Direct system registration, inventory reconciliation, artifact maintenance, data quality review, and status validation in the agency’s designated GRC platform.
→Lead POA&M management, residual risk analysis, risk reporting, and remediation tracking.
→Support cloud and FedRAMP documentation, control inheritance analysis, and shared responsibility analysis.
→Review major changes, prepare security impact analyses, and support onboarding and decommissioning.
→Conduct technical and quality reviews before submitting cybersecurity artifacts.
→Identify and escalate risks that could affect an authorization, assessment, or deliverable schedule.
→Support transition activities and reconcile authorization boundaries, inventories, artifacts, and active work.

What We Offer

~1 min read

This is an opportunity to make a direct impact on healthcare data processes that support critical regulatory functions. You will collaborate with dedicated professionals, work on meaningful projects, and contribute to improvements in public health systems.

Candidates may use tools (including AI) for proofreading or formatting; however, using any tool to fabricate, exaggerate, or misrepresent qualifications, experience, or work product is not permitted. We may assess application materials for job-related technical depth, internal consistency, and demonstrated hands-on experience, including through follow-up questions, skills assessments, or reference checks. Verification of education may be requested before or during the hiring process.

For security and identity verification purposes, participants may be asked to temporarily disable virtual backgrounds during portions of the call.

Misrepresentation or falsification may result in removal from further consideration. Candidates who need a reasonable accommodation in the application or interview process may request one.