• Lead and support the full NIST RMF lifecycle for Onebrief deployments, on-prem or cloud-native, across multiple security boundaries • Maintain, and review authorization packages, including SSPs, SAPs, SARs, POA&Ms, STIGs, and supporting artifacts • Coordinate internal assessments and readiness checks ahead of external audits • Partner with Engineers, Product teams, and Security leadership to integrate compliance requirements into system design and operations • Provide guidance on secure architecture and control implementation • Track regulatory changes and advise leadership on compliance implications • Conduct periodic risk assessments and suggest appropriate risk treatment actions • Develop internal cybersecurity awareness and training presentations for employees • Conduct supply chain risk management assessments for current and future vendors