- Lead all RMF activities for the assigned system, including Categorization, Selection, Implementation, Assessment, Authorization, and Continuous Monitoring.
- Oversee the design, implementation, and validation of NIST 800-53 Rev 5 security and privacy controls.
- Develop, maintain, and update key security artifacts including System Security Plans (SSPs), Security Assessment Reports (SARs), POA&Ms, and Incident Response Plans.
- Coordinate and support security control assessments (SCAs), penetration tests, vulnerability scans, and compliance audits.
- Guide engineering teams on implementing and documenting new or updated security controls.
- Lead risk assessments, document findings, and track remediation through POA&M management.
- Manage continuous monitoring activities, including log review, vulnerability management, and patch tracking.
- Serve as the primary security liaison for system owners, internal stakeholders, external assessors, and authorizing officials.
- Mentor junior ISSOs and analysts in RMF, control interpretation, and documentation quality.
Cloud ComputingCybersecurity