Apply on Employer Site

FEDITC · 1 month ago

Risk Management Framework (RMF) Analyst

Scott AFB, IL

Full-time

Onsite

Mid Level

3+ years exp

FEDITC, LLC is a fast-growing business supporting DoD and other intelligence agencies worldwide. They are seeking a Risk Management Framework (RMF) Analyst to support cybersecurity compliance and accreditation efforts for federal systems, utilizing hands-on experience with the RMF lifecycle and collaborating with cross-functional teams.

ConsultingCyber SecurityGovernmentInformation Technology

Work & Life Balance

No H1B

Security Clearance Required

U.S. Citizen Only

Responsibilities

Support execution of the full RMF lifecycle (Categorization, Selection, Implementation, Assessment, Authorization, and Monitoring) for assigned systems

Develop, review, and maintain RMF documentation including System Security Plans (SSPs), Security Assessment Reports (SARs), POA&Ms, Contingency Plans, and other artifacts

Conduct risk assessments and control validation activities in accordance with NIST SP 800-53 and other relevant guidelines

Coordinate with ISSMs, system owners, engineers, and assessors to ensure control implementation, evidence collection, and audit readiness

Perform continuous monitoring activities and maintain ongoing system security posture

Track and manage system accreditation status using tools such as eMASS, XACTA, or equivalent

Assist with internal and external security audits and inspections

Identify and recommend risk mitigation strategies to ensure compliance and enhance security

Qualification

RMF lifecycle experienceNIST RMF standardsCybersecurity tools experienceDoD 8570.01-M certificationDocumentation skillsCommunication skillsCollaborative skillsIndependent work skills

Required

Bachelor's degree in Cybersecurity, Information Systems, or a related technical field

Minimum of 3 years of hands-on experience supporting RMF or similar compliance frameworks

Knowledge of NIST RMF standards (800-37, 800-53, 800-30)

Experience with cybersecurity tools and risk management platforms (e.g., eMASS, ACAS, STIGs, SCAP tools)

Active DoD 8570.01-M certification (e.g., Security+, CAP, or CISSP)

Strong written and verbal communication skills

Ability to work independently and collaboratively in a fast-paced environment

Active Secret Security Clearance is required

Must be a US Citizen and pass a background check

Maintain applicable security clearance(s) at the level required by the client and/or applicable certification(s) as requested by FEDITC and/or required by FEDITC'S Client(s)/Customer(s)/Prime contractor(s)