Cyber Remediation & POA&M Coordinator
Responsibilities
- Coordinate enterprise remediation activities for vulnerabilities identified through continuous monitoring, scanning, and audits
- Develop, maintain, and manage POA&Ms in accordance with Federal, HHS, and NIH requirements
- Partner with ISSOs, system owners, and security engineers to establish remediation plans and timelines
- Monitor remediation progress, validate evidence, and ensure accurate documentation
- Coordinate risk acceptance requests, compensating controls, and waivers through governance processes
- Track remediation performance against service level objectives and communicate high priority items to leadership
- Support RMF authorization activities by ensuring vulnerabilities are accurately reflected in documentation
- Collaborate with threat intelligence to reprioritize activities based on exploitability and emerging threats
- Develop recurring remediation status reports and operational metrics for Government leadership
- Support internal and external cybersecurity assessments by tracking corrective actions through closure
- Recommend process improvements to enhance remediation efficiency and risk reduction
Requirements
- Bachelor's degree in Cybersecurity, Information Systems, IT, or related discipline
- 3+ years of experience in vulnerability management, RMF, or cybersecurity compliance
- Experience developing and managing Plans of Action and Milestones (POA&Ms)
- Working knowledge of NIST RMF, FISMA, and NIST SP 800-53
- Experience coordinating remediation across multiple technical teams and stakeholders
- Strong organizational and communication skills for technical and executive reporting
Preferred Qualifications
- Experience supporting NIH, HHS, or other Federal civilian agencies
- Experience with GRC platforms such as JCAM, eMASS, ServiceNow, or Archer
- Experience with Continuous Diagnostics and Mitigation (CDM) initiatives
- Familiarity with CISA KEV guidance and Binding Operational Directives
- Certifications such as CGRC, CISSP, Security+, CAP, CISM, or PMP
About the Company
True Zero Technologies is a veteran-owned small business dedicated to the purposeful enablement of people and technology. Recognized as a Best Place to Work and an Inc. 5000 fastest-growing company, True Zero focuses on delivering top-tier services through a people-first approach.