Cyber Compliance Lead

Please note: This role is contingent upon a contract award. While it is not an immediate opening, we are actively conducting interviews and extending offers in anticipation of the award. 

We are seeking a Cyber Compliance Lead to oversee compliance, risk management, and governance activities in support of a federal government program. The ideal candidate will serve as the primary point of contact for ensuring that all systems, processes, and documentation meet federal cybersecurity requirements, including NIST, FedRAMP, FISMA, and agency-specific standards. 

Job Location: Remote work is authorized.  Must support US Eastern time zone working hours.   

*If you accept this position, you should note that ICF does monitor employee work locations blocks access from foreign locations/foreign IP addresses and prohibits personal VPN connections.  

What You Will Do:  

• Lead the development, implementation, and maintenance of cybersecurity compliance frameworks for federal systems. 

• Ensure compliance with federal requirements (NIST RMF, FISMA, FedRAMP, CMMC, agency directives, etc.). 

• Manage and oversee Authority to Operate (ATO) processes, including preparation of documentation (SSPs, SARs, POA&Ms, etc.). 

• Conduct internal audits, security control assessments, and continuous monitoring activities. 

• Provide guidance to technical and program teams on compliance obligations, risks, and remediation strategies. 

• Collaborate with government stakeholders, system owners, and contractors to resolve compliance issues. 

• Track and report compliance status, risks, and mitigation plans to leadership. 

• Serve as subject matter expert on evolving federal cybersecurity policy, standards, and regulations. 

What You Will Bring With You:  

• U.S. Citizenship or a Green Card is required due to federal contract requirements and ability to obtain a Public Trust clearance

• Candidate must reside in the U.S., be authorized to work in the U.S., and all work must be performed in the U.S.  

• Candidate must have lived in the U.S. for three (3) full years out of the last five (5) years. 

• Bachelor's degree in Cybersecurity, Information Technology, or related field

• Requires 7+ years of compliance/security experience, including ATO support, secure SDLC practices under EO 14028, supply chain attestation, and FedRAMP inheritance.  

What We Would Like You To Bring With You:  

• Master’s degree preferred. 

• Strong knowledge of NIST Risk Management Framework (RMF), FedRAMP, FISMA, CMMC, and related federal cybersecurity requirements. 

• Hands-on experience with compliance tools, continuous monitoring, and vulnerability management solutions. 

• Prior experience leading ATO processes and working with federal authorizing officials. 

Professional Skills: 

• Highly effective analytical, influential, problem-solving, and decision-making capabilities. 

• Excellent communication and interpersonal skills to interface effectively at all levels of the business.