DoD RMF Security Assessor (SCAR) – eMASS Expert

Insight Global; St. Louis (MO); On-site; USD 120,000 - 150,000; Full time

Job summary

Insight Global is seeking an experienced Secret Security Control Assessor Representative (SCAR) to support a large DoD cybersecurity program at Scott Air Force Base. The SCAR will independently assess security controls, validate RMF compliance, and support ATO decisions for enterprise systems critical to DoD missions.

The role requires 6–8+ years in cybersecurity/RMF, extensive eMASS experience, and strong knowledge of RMF processes and DoD documentation such as SSPs and POA&Ms.

Qualifications

• 6–8+ years in cybersecurity, information assurance, or RMF.
• Strong RMF experience with DoD requirements.
• Experience reviewing SSPs, POA&Ms, RMF Packages and Authorization Packages (Rev4 & Rev5).
• Ability to identify cybersecurity risks and control deficiencies.
• Certifications (One Required) such as CISSP/CISM/CISA/GSLC/GSNA.

Responsibilities

• Conduct independent security control assessments across management, operational, technical, and privacy controls.
• Review RMF documentation (SSPs, POA&Ms, Security Categorization Packages, Authorization Packages).
• Assess artifacts and identify cybersecurity risks, gaps, and deficiencies.
• Perform IV&V activities in eMASS to verify controls operate as intended.
• Provide risk-based recommendations and support AO/ SCA package preparation.
• Coordinate authorization package status from submission to approval/denial.
• Collaborate with system owners, ISSOs, cybersecurity teams, and government stakeholders.

Skills

RMF knowledge

eMASS proficiency

Security control assessments

Documentation review

Risk analysis

Stakeholder collaboration

Education

CISSP

CISSP-ISSEP

CISM

CISA

CCISO

CySA+

GSLC

GSNA

Tools

eMASS

Job description

Insight Global is seeking an experienced Secret Security Control Assessor Representative (SCAR) to support a large DoD cybersecurity program at Scott Air Force Base. The SCAR will independently assess security controls, validate RMF compliance, and support ATO decisions for enterprise systems critical to DoD missions.

The role requires 6–8+ years in cybersecurity/RMF, extensive eMASS experience, and strong knowledge of RMF processes and DoD documentation such as SSPs and POA&Ms.