True Zero Technologies, a veteran-owned small business, was founded on the principle that the purposeful enablement of people and technology in an organization directly ties to the quality of its outcomes. True Zero recognizes that those outcomes begin and end with our people, and that is what we have built a community of like-minded, driven, and passionate individuals and innovators who are aligned in a common goal of delivering top-tier services to our customers. Our culture and commitment have been recognized through numerous accolades, including being named one of the Best Places to Work in 2023 in two categories (“Prosperous and Thriving” ($5MM–$50MM in gross revenue) and “Mid-Atlantic Region” (DC, DE, MD, NC, VA, WV)), and again in 2025 as a Best Places to Work honoree. In addition, True Zero earned coveted spots on the Inc. 5000 list of fastest-growing companies in America in 2022, 2023, and 2025, a testament to our sustained growth driven by our people-first approach and unwavering dedication to excellence.
Position Responsibilities
Roles and Responsibilities
- Develop, revise, and maintain RMF policies, standard operating procedures, process guides, work instructions, templates, checklists, and governance documentation.
- Document current-state and target-state RMF processes, including activities, decision points, handoffs, approvals, roles, responsibilities, and dependencies.
- Translate regulatory, cybersecurity, and operational requirements into clear and actionable process documentation.
- Gather workflow requirements and inputs from system owners, ISSOs, ISSMs, assessors, engineers, authorization personnel, and other stakeholders.
- Define workflow steps, required data fields, supporting documentation, approval paths, notifications, escalation criteria, and completion requirements.
- Support the development and maintenance of authorization documentation, including System Security Plans, control implementation statements, POA&Ms, risk assessments, and continuous-monitoring artifacts.
- Review RMF documentation for accuracy, completeness, consistency, proper formatting, and alignment with established standards.
- Maintain document version control, review schedules, approval records, change histories, and controlled-document repositories.
- Support governance boards, process reviews, working groups, audits, and compliance assessments by preparing agendas, materials, reports, and action-item trackers.
- Monitor adherence to RMF policies, procedures, documentation standards, and governance requirements, and identify areas requiring corrective action.
- Maintain process metrics, dashboards, decision logs, risk registers, issue trackers, and governance reporting for program leadership.
- Coordinate document reviews, stakeholder feedback, approvals, publication, training, and implementation of updated RMF processes.
Position Qualifications
Bachelor’s degree in cybersecurity, information technology, information systems, business, technical writing, or a related field, or equivalent professional experience.
Three to five years of experience supporting RMF, cybersecurity compliance, governance, security authorization, or federal information assurance programs.
Working knowledge of NIST RMF, NIST SP 800-37, NIST SP 800-53, FIPS 199, FIPS 200, and federal authorization requirements.
Demonstrated experience developing policies, procedures, process maps, governance documents, templates, and technical or compliance documentation.
Experience gathering requirements and translating stakeholder inputs into documented workflows, business rules, roles, and approval processes.
Strong writing, editing, organization, facilitation, and stakeholder-coordination skills, with close attention to documentation quality and detail.
Clearance Requirement
Ability to obtain may be required
Role Summary
The RMF Process Specialist will support the development, documentation, standardization, and governance of Risk Management Framework processes across the organization. This role will work with cybersecurity teams, system owners, assessors, and technical stakeholders to create clear policies, procedures, workflow requirements, templates, and governance documentation. The specialist will help ensure RMF activities are consistently executed, properly documented, and aligned with federal cybersecurity requirements and organizational standards.
