Lead and support the full NIST RMF lifecycle for Onebrief deployments, on-prem or cloud-native, across multiple security boundaries
Maintain, and review authorization packages, including SSPs, SAPs, SARs, POA&Ms, STIGs, and supporting artifacts
Coordinate internal assessments and readiness checks ahead of external audits
Partner with Engineers, Product teams, and Security leadership to integrate compliance requirements into system design and operations
Provide guidance on secure architecture and control implementation
Track regulatory changes and advise leadership on compliance implications
Conduct periodic risk assessments and suggest appropriate risk treatment actions
Develop internal cybersecurity awareness and training presentations for employees
Conduct supply chain risk management assessments for current and future vendors

Requirements

Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or a related field
Hands-on expertise with Risk Management Framework across multiple security domains
U.S. Citizen
8+ years in Cybersecurity Compliance and related roles
Experience with Enterprise Mission Assurance Support Service (eMASS) and leveraging automated evidence collection and testing capabilities
Familiarity with cloud security standards (e.g., FedRAMP, ISO 27001, NIST 800-171, DoD Cloud Computing Security Requirements Guide)
Strong background in policy development, control testing, and evidence gathering
Excellent communication skills for working with both technical and non-technical stakeholders.

Benefits

Equity: Share in the company's success.
Flexible Work Environment: Remote work with flexible hours and unlimited PTO.
Comprehensive Health Coverage: Health, dental, vision, and life insurance.
Retirement Plan: 401(k) plan to secure your future.
Parental Leave: 8 weeks at 100% regardless of state.
Company Retreats: Annual company summit trips.
Home Office Budget: $1,000 per year for home office improvements.

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

NIST RMFRisk Management Frameworkcybersecurity compliancepolicy developmentcontrol testingeMASSevidence gatheringcloud security standardsFedRAMPNIST 800-171

Soft Skills

communication skillsguidancecollaborationrisk assessmenttraining development