Cybersecurity Governance, Risk, and Compliance (GRC) / Risk Management Framework (RMF) Lead

Leads governance, risk and compliance work on a federal healthcare programme for Tria Federal, working remotely in the US and coordinating the day-to-day work of a team of cybersecurity practitioners across several authorisation boundaries. The lead runs the NIST RMF lifecycle from categorisation to continuous monitoring, oversees SSPs, SARs, POA&Ms and risk assessments, evaluates control evidence and findings, reviews DevSecOps vulnerability scans, assesses the security impact of changes, and works with the SecOps and DevOps leads and government stakeholders.

It asks for federal RMF, FISMA and authorisation experience, NIST 800-37 and 800-53, experience leading practitioners, and Public Trust eligibility; Salesforce, AWS and Snyk experience are preferred.