More jobs:
GRC/NIST RMF Specialist
Job in
Chantilly, Fairfax County, Virginia, 22021, USA
Listed on 2026-05-17
Listing for:
Apogee Global RMS
Full Time
position Listed on 2026-05-17
Job specializations:
-
IT/Tech
Cybersecurity, Information Security
Job Description & How to Apply Below
Apogee Global RMS is seeking a GRC / NIST RMF Specialist to support federal programs requiring disciplined governance, risk, and compliance execution. This role is built for practitioners who understand the full lifecycle of NIST RMF, can translate controls into actionable engineering guidance, and can partner with federal stakeholders to drive accreditation success.
You will serve as a trusted advisor across security, engineering, and mission teams — ensuring that compliance is not a paperwork exercise but a strategic enabler of secure operations.
What You Will Lead- Full lifecycle NIST RMF execution (Categorization → Continuous Monitoring)
- Development and refinement of SSPs, POA&Ms, SARs, and control evidence packages
- Security control assessments, gap analyses, and remediation planning
- Advisory support for ATO readiness, audit preparation, and stakeholder coordination
- Risk analysis and prioritization aligned to mission, system, and organizational impact
- Collaboration with engineering teams to ensure controls are implemented effectively
- Continuous monitoring strategy, reporting, and compliance sustainment
- CISA
- CRISC
- CISM
- NIST RMF training (FedVTE or equivalent)
- ISO 27001 Lead Auditor is a meaningful differentiator, especially for commercial‑adjacent bids
- Deep understanding of NIST 800‑53, NIST RMF, and federal security baselines
- Experience preparing ATO packages and supporting federal accreditation processes
- Ability to translate compliance requirements into clear, actionable engineering tasks
- Strong writing and documentation skills for federal audiences
- Experience working with ISSOs, ISSEs, SCA teams, and federal program leadership
- Must reside in the NCR (DC/MD/VA)
- Secret clearance minimum; clearable candidates considered
- Operates with precision, structure, and clarity
- Understands both the technical and policy sides of federal cybersecurity
- Can guide teams through complex accreditation processes without friction
- Communicates confidently with auditors, assessors, and mission stakeholders
- Thrives in high‑trust, high‑impact advisory environments
To View & Apply for jobs on this site that accept applications from your location or country, tap the button below to make a Search.
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).
Search for further Jobs Here:
×