RMF Instructor – Security Control Implementation Statements

Cybervance, Inc.

. Deliver engaging, hands-on live virtual labs and Essentials sessions, adapting pace and depth for audiences ranging from new ISSOs and managers to experienced practitioners .

Posted 10/13/2026contractUnited StatesMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in delivering technical training focused on security and compliance, with a strong emphasis on hands-on labs and virtual facilitation. Proficient in developing course materials and providing actionable feedback, while possessing extensive knowledge of NIST standards and cloud security frameworks.

Highest-signal resume keywords

Technical Training DeliveryHands-On Lab FacilitationNIST SP 800-53A KnowledgeCloud Security ExperienceSecurity Control Implementation

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Risk Management Framework (RMF)Security Control AssessmentTechnical WritingControl AllocationBoundary DefinitionImplementation StatementsAssessment and AuthorizationMock Interview FacilitationCurriculum DesignLearning Objective Development

Soft Skills

Facilitation SkillsConstructive FeedbackAdaptabilityCoaching

Tools & Technologies

GRC ToolsXactaCSAM

Certifications & Qualifications

CGRCCISSPCCSPAWS Security CertificationAzure Security CertificationGoogle Cloud Security Certification

Industry Keywords

FedRAMPCommon CriteriaNIST SP 800-37NIST SP 800-53 Rev. 5FIPS 199FIPS 200

Tech Stack

Tools & technologies

AWSAzureCloud

About the role

Key responsibilities & impact

Deliver engaging, hands-on live virtual labs and Essentials sessions, adapting pace and depth for audiences ranging from new ISSOs and managers to experienced practitioners
Facilitate mock interviews with system owners, IT staff, auditors, and assessors; coach students through each Gather, Write, Verify cycle; and provide specific, actionable feedback on drafts
Teach boundary definition for systems with cloud and SaaS components using Common Criteria concepts and FedRAMP guidance
Teach control allocation across common control providers, cloud providers, and the system
Teach students to write security control implementation statements that identify boundary components, show control allocation as inherited, hybrid, or system-specific, and complete organization-defined parameters
Run verification exercises against simulated configurations, scans, logs, and account listings using NIST SP 800-53A methods: examine, interview, and test
Guide students through assessment, authorization, and change scenarios, including assessor interviews, evidence requests, POA&M entries, risk statements, AO decision briefs, and continuous monitoring plans
Design, develop, and refine course materials, including learning objectives, labs, simulated artifacts, and grading rubrics

Requirements

What you’ll need

Proven experience delivering engaging technical training to adult learners, preferably security or compliance professionals, in live virtual settings with hands-on labs
Strong facilitation skills, including leading role-plays and group exercises and adapting to mixed experience levels
Extensive hands-on RMF experience, including ISSO, ISSM, or assessor experience; writing SSPs and implementation statements; and supporting systems through assessment and authorization
Direct experience with cloud or hybrid systems and FedRAMP packages, including boundary definition and control allocation
In-depth knowledge of NIST SP 800-37, SP 800-53 Rev. 5, SP 800-53A, and FIPS 199/200
Experience designing technical training: writing measurable learning objectives, structuring curricula, and building hands-on labs and assessments
Strong technical writing skills and ability to give constructive feedback on others' writing
Preferred: track record of strong learner evaluations or experience teaching certification prep courses such as CGRC or CISSP
Preferred: certifications such as CGRC, CISSP, CCSP, or AWS, Azure, or Google Cloud security certifications
Preferred: experience as a FedRAMP 3PAO or security control assessor
Preferred: familiarity with Common Criteria (ISO/IEC 15408)
Preferred: familiarity with GRC tools such as Xacta or CSAM
Preferred: formal instructional design training or certification, or experience applying ADDIE or SAM

Benefits

Comp & perks

Contract - 1099
Remote-hybrid work arrangement