RMF Process Specialist

Company Overview

True Zero Technologies is a veteran-owned small business emphasizing that empowering individuals alongside technological resources drives superior results in organizations. The company fosters a community of motivated innovators united by a commitment to deliver exceptional services. Recognized as a top workplace in 2023 and 2025 in various categories and regions, True Zero also achieved placement on the Inc. 5000 fastest-growing companies list multiple times, reflecting its growth rooted in a people-first philosophy.

Position Summary

The RMF Process Specialist plays a critical role in managing and refining the Risk Management Framework processes within the organization. This specialist collaborates with cybersecurity teams, system owners, assessors, and other stakeholders to establish, document, and govern RMF-related policies, procedures, workflows, and templates, ensuring comprehensive compliance with federal cybersecurity mandates and organizational standards.

Key Responsibilities

• Create, update, and sustain RMF policies, SOPs, process guides, templates, checklists, and governance documents.
• Map both existing and targeted RMF processes detailing activities, decision points, responsibilities, approvals, and dependencies.
• Convert regulatory, cybersecurity, and operational requirements into practical process documentation.
• Collect workflow needs from stakeholders including system owners, ISSOs, and assessors.
• Design workflow steps covering data fields, documentation, approval procedures, notifications, and escalation rules.
• Assist in producing and updating authorization documents like System Security Plans, POA&Ms, risk evaluations, and continuous monitoring materials.
• Evaluate RMF documentation for accuracy, completeness, consistency, and conformance to standards.
• Manage version control, review timelines, approval logs, change records, and document repositories.
• Support governance boards, audits, compliance assessments by preparing necessary documentation and follow-ups.
• Oversee compliance with RMF policies, identify deviations, and recommend corrective measures.
• Track process metrics, dashboards, issue logs, and generate reports for program leadership.
• Coordinate the document review process, stakeholder feedback collection, approvals, publication, training, and implementation of RMF updates.

Qualifications

• Bachelor’s degree in cybersecurity, IT, information systems, business, technical writing, or a related discipline, or equivalent experience.
• Between 3 and 5 years of hands-on experience supporting RMF processes, cybersecurity compliance, governance, or federal information assurance programs.
• Proficiency with NIST RMF, including NIST SP 800-37, SP 800-53, FIPS 199, 200, and federal authorization standards.
• Demonstrated capability in developing policies, procedures, process mappings, governance frameworks, and technical compliance documentation.
• Experience in eliciting requirements and translating stakeholder inputs into documented workflows, business rules, roles, and approval paths.
• Excellent communication, editorial, organizational, facilitation, and stakeholder coordination skills with meticulous attention to documentation quality.
• Possibility of requiring security clearance eligibility.

Additional Information

The company may employ artificial intelligence tools to support certain aspects of the hiring process such as resume review and application assessment; however, final employment decisions are made by humans. For inquiries about data processing, contact the employer directly.