DoD RMF & AI Risk Cybersecurity Lead

Spry Methods, Inc.; Stafford (VA); On-site; USD 120,000 - 180,000; Full time

Job summary

Spry Methods, Inc. seeks a cybersecurity leader to align AI/ML risk with DoD directives and enterprise risk posture.

You will oversee RMF A&A activities, POA&M remediation, and STIG compliance across Windows, Linux, and network devices, delivering secure, mission-ready environments. Responsibilities include evaluating architectures through zero-trust, interpreting CTOs and other directives, and drafting policies with continuous monitoring strategies.

Qualifications

• Experience assessing the risk of AI/ML capabilities within DoD guidelines.
• Ability to interpret CTOs, Task Orders, and DoD directives for cyber programs.
• Expert-level POA&M creation and management across enterprise systems.
• Advanced understanding of CND architectures and zero-trust in design.
• Leadership in RMF A&A lifecycles using eMASS and related workflows.
• Knowledge of NIST SP 800-53, CNSSI 1253, NIST SP 800-161/162, DoDI 8510.01.
• Experience drafting cybersecurity policies, IRPs, and continuous monitoring.
• Proficiency with DISA STIG Viewer, SCC, and validation of STIG/SRG on OSes.

Responsibilities

• Lead cybersecurity risk management across enterprise systems.
• Assess AI/ML capabilities and ensure compliance with DoD directives.
• Oversee RMF A&A activities and POA&M remediation strategies.
• Develop cybersecurity policies and continuous monitoring strategies.
• Provide technical leadership to maintain secure, mission-ready environments.
• Validate security controls and STIG compliance across platforms.

Skills

AI/ML risk assessment

DoD directives interpretation

POA&M management

CND with zero-trust

RMF leadership

NIST SP 800-53 / CNSSI 1253 / SP 800-X

Policy drafting & IR plans

DISA STIG / SCC tools

Tools

DISA STIG Viewer

SCAP Compliance Checker (SCC)

eMASSter

Job description

Spry Methods, Inc. seeks a cybersecurity leader to align AI/ML risk with DoD directives and enterprise risk posture.

You will oversee RMF A&A activities, POA&M remediation, and STIG compliance across Windows, Linux, and network devices, delivering secure, mission-ready environments. Responsibilities include evaluating architectures through zero-trust, interpreting CTOs and other directives, and drafting policies with continuous monitoring strategies.