Cybersecurity Governance, Risk, and Compliance (GRC) / Risk Management Framework (RMF) Lead

Location: Remote within the United States. Candidates within 50 miles of Woodlawn, Maryland, may elect to work onsite or in a hybrid capacity; onsite attendance is not required. Must reside in and be authorized to work in the United States and meet federal contract residency requirements, including residing in the United States for at least three of the preceding five years.

Company

hirify.global delivers digital services and technology solutions for federal agencies, supporting the health and safety missions of veterans, service members, and civilians.

What you will do

• Lead and coordinate cybersecurity practitioners supporting multiple federal information systems and authorization boundaries.
• Lead RMF activities across the authorization lifecycle, including categorization, control selection, assessment, authorization support, and continuous monitoring.
• Oversee System Security Plans, Security Assessment Reports, Plans of Action and Milestones, risk assessments, and related authorization documentation.
• Evaluate security controls, evidence, vulnerabilities, and findings; assess mission impact and residual risk; and recommend remediation or mitigation strategies.
• Coordinate security scans, DevSecOps-related assessments, vulnerability remediation, and continuous monitoring across technical and multidisciplinary teams.
• Communicate cybersecurity risks, compliance status, and recommendations to government stakeholders, technical personnel, security assessors, and organizational leadership.

Requirements

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Information Systems, or a related discipline, or an equivalent combination of relevant education and professional experience.
• Professional experience supporting federal cybersecurity programs, including direct involvement in NIST RMF activities, FISMA compliance, and system authorization processes.
• Experience leading or coordinating cybersecurity practitioners, managing competing priorities, and ensuring timely, accurate completion of technical and compliance deliverables.
• Strong working knowledge of NIST SP 800-37, NIST SP 800-53, and related federal information security requirements and guidance.
• Experience developing, reviewing, and maintaining system authorization documentation and supporting artifacts.
• Ability to evaluate technical security findings, assess organizational risk, and recommend remediation or mitigation strategies.
• Strong written and verbal communication skills for communicating cybersecurity risks and recommendations to technical personnel, government stakeholders, and organizational leadership.
• Ability to obtain and maintain the required federal Public Trust designation or another customer-required suitability determination.
• Must reside in and be authorized to work in the United States and satisfy applicable federal contract residency requirements.

Nice to have

• Experience supporting cybersecurity, risk management, and compliance activities within large-scale Salesforce implementations, including Salesforce security architecture, access controls, data protection, integrations, and platform-specific security considerations.
• Experience with cloud-based enterprise applications and infrastructure, particularly Amazon Web Services (AWS), in federal or similarly regulated environments.
• Experience using Snyk, GitHub, Jira, and Confluence for vulnerability management, DevSecOps activities, security documentation, and remediation tracking.
• Experience supporting federal healthcare programs or other complex federal civilian information systems.
• Experience coordinating security assessments, vulnerability remediation, and continuous monitoring across multidisciplinary technical teams.
• Current, active CISSP, CSSLP, PMP, AWS Certified Security – Specialty, or other relevant AWS professional-level certification.

Culture & Benefits

• Remote work is available for qualified candidates residing within the United States.
• Onsite or hybrid work may be elected by candidates located within 50 miles of Woodlawn, Maryland.
• Benefits support physical, mental, and financial health and wellness.
• Opportunities are provided to learn new skills, take on challenges, and advance professionally.
• Veterans, transitioning service members, and military spouses are strongly encouraged to apply.