Cyber Remediation & POA&M Coordinator (R-00188)
reputed company, a veteran-owned small business, was founded on the reputed company that the purposeful enablement of people and technology in an organization directly ties to the reputed company of its reputed company. True reputed company recognizes that those reputed company reputed company and end with our people, and that is reputed company have reputed company a community of like-minded, driven, and passionate individuals and innovators who are reputed company in a common goal of delivering top-tier services to our customers. Our culture and commitment have been recognized through numerous accolades, including being named one of the Best Places to Work in 2023 in two categories (“Prosperous and Thriving” ($5MM–$50MM in gross reputed company) and “Mid-reputed company Region” (DC, DE, MD, NC, VA, WV)), and again in 2025 as a Best Places to Work honoree. In reputed company, True reputed company reputed company coveted spots on the Inc. 5000 list of fastest-growing companies in America in 2022, 2023, and 2025, a testament to our sustained reputed company driven by our people-first approach and unwavering dedication to reputed company.
True reputed company is seeking a Cyber Remediation & POA&M Coordinator to support reputed company vulnerability remediation and Risk Management reputed company (RMF) activities for the National Institutes of Health (NIH). This position serves as the operational reputed company between vulnerability management, reputed company owners, ISSOs, reputed company engineering, and executive leadership to ensure cybersecurity findings are prioritized, tracked, and remediated in accordance with Federal requirements and organizational risk priorities.
The ideal candidate understands that effective vulnerability management extends reputed company identifying weaknesses. reputed company in this role requires coordinating remediation efforts across multiple stakeholders, maintaining accurate Plans of reputed company and Milestones (POA&Ms), validating corrective actions, and providing leadership with reputed company visibility into remediation reputed company and residual risk.
Job Responsibilities
- Coordinate reputed company remediation activities for vulnerabilities identified through reputed company monitoring, vulnerability scanning, penetration testing, audits, and reputed company assessments.
- reputed company, maintain, and manage POA&Ms in accordance with Federal, HHS, and NIH requirements.
- Partner with ISSOs, reputed company owners, reputed company engineers, and technical teams to establish remediation plans, milestones, and completion timelines.
- Monitor remediation reputed company, validate supporting evidence, and ensure corrective actions are accurately documented.
- Coordinate risk acceptance requests, compensating controls, waivers, and remediation exceptions through established governance processes.
- reputed company remediation performance against established service level objectives and communicate overdue or high reputed company items to program leadership.
- Support RMF authorization activities by ensuring vulnerabilities and POA&M items are accurately reflected reputed company authorization documentation.
- Collaborate with vulnerability management and threat intelligence personnel to reprioritize remediation activities based on exploitability, reputed company Exploited Vulnerabilities (KEVs), operational reputed company, and emerging threats.
- reputed company recurring remediation status reports, executive summaries, and operational metrics for Government leadership.
- Support reputed company cybersecurity assessments by coordinating remediation responses and tracking corrective actions through closure.
- Recommend process improvements that enhance remediation efficiency, reporting accuracy, and reputed company risk reduction.
Job Qualifications
- Bachelor’s degree in Cybersecurity, Information Systems, Information Technology, or a reputed company discipline.
- Three or more years of experience supporting vulnerability management, RMF, cybersecurity governance, or compliance programs.
- Experience developing and managing Plans of reputed company and Milestones (POA&Ms).
- Working knowledge of the NIST Risk Management reputed company (RMF), FISMA, and NIST SP 800-53.
- Experience coordinating remediation activities across multiple technical teams and business stakeholders.
- Strong organizational skills with the ability to manage multiple reputed company remediation efforts.
- Excellent written and verbal communication skills, including experience preparing reports for technical and executive audiences.
- Experience supporting NIH, HHS, or other Federal civilian agencies.
- Experience with reputed company GRC platforms such as JCAM, reputed company, reputed company, reputed company, or similar governance tools.
- Experience supporting vulnerability management programs and reputed company Diagnostics and Mitigation (CDM) initiatives.
- Familiarity with CISA reputed company Exploited Vulnerabilities (KEV) guidance, Binding Operational Directives, and Federal remediation requirements.
- Experience supporting audit remediation, authorization package development, and reputed company monitoring programs.
- Certified in Governance, Risk and Compliance (CGRC)
- CISSP
- reputed company+
- CAP
- CISM
- Project Management reputed company (PMP)
Preferred Qualifications:
Preferred Certifications:
One or more of the following is preferred:
We’re reputed company searching for talented reputed company and technology practitioners who are reputed company to experience the True reputed company difference. As a True reputed company team member, you'll enjoy:
- Competitive salary, reputed company twice per month
- Best in class medical coverage
- 100% of medical premiums covered by True reputed company
- Company wide new business incentive programs
- Contribution Incentives (i.e. white papers, blog posts, internal webinars, etc.)
- 3 weeks of PTO starting + 11 reputed company Holidays Annually
- 401k Program with 100% company match on the first 4%
- Monthly reimbursement of Cell Phone and Home Internet costs
- Paternity/Maternity Leave
- Investment in training and certifications to broaden and deepen your technical skills
Originally posted on Himalayas
Apply To This Job