RMF/GRC Program Lead

Overseeing the organization's Risk Management Framework (RMF) and Governance, Risk, and Compliance (GRC) initiatives, the full-time RMF/GRC Program Lead will develop and maintain security policies, conduct risk assessments, and report compliance metrics to senior leadership in a remote setting. Key responsibilities Lead the RMF and GRC programs, ensuring compliance with regulatory and organizational requirements Develop and maintain security policies, procedures, and controls to meet industry standards Coordinate audits and report risk status and compliance metrics to senior leadership Required qualifications Bachelor's degree in Information Security, Risk Management, or a related field; Master's or MBA preferred Minimum 6 years of experience in GRC, risk management, or compliance leadership roles Certifications such as CISM, CRISC, CGRC (CAP), or CISA Expertise in regulatory frameworks (NIST, ISO 27001, FedRAMP, etc.) and risk management methodologies