RMF / GRC Lead/Cybersecurity/CISSP /CGRC/CISA/CISM/CGRC/Healthcare/ MD/VA/Washington DC area

Education:  Bachelor''''''''''''''''''''''''''''''''s (Master''''''''''''''''''''''''''''''''s preferred)

Experience required:  13+ years 

Certifications — required:  CISSP + CGRC (CAP)

Certifications — preferred:  CISA, CISM

Required skills

•    NIST SP 800-37/800-53 Rev.5; RMF lifecycle

•    C-SCRM / EO 14028; SBOM review

•    Audit support; enterprise risk governance

Key responsibilities

•    Own the RMF program, risk strategy, and control baselines

•    Provide QA review of authorization packages before AO submission

•    Lead audit support (OIG/GAO/HHS) and risk reporting to leadership