ISSO Senior RMF Specialist

Qbe Llc; Rock Island (IL); On-site; USD 110,000 - 160,000; Full time

Job summary

QBE, LLC is seeking a Senior RMF Specialist/ISSO to guide IT systems through the RMF lifecycle, achieving and maintaining ATO for US Army G2 divisions AMIS-IN, AMIS-SE, and SPO.

The role requires leading RMF activities, developing essential documentation (SSP, SAR, POA&M), managing eMASS data, and coordinating with AO and stakeholders to ensure ongoing compliance and risk mitigation.

Qualifications

• Top Secret/SCI clearance required.
• BA/BS with 5+ years RMF experience on DoD IT systems.
• Certifications meeting DoD 8570/8140 for IAT Level II (e.g., Security+, CCNA, RHCSA, MCSA).
• Demonstrated mastery of eMASS, vulnerability scanning tools (ACAS/Nessus), COMSEC, and security checkers.

Responsibilities

• Lead RMF execution through system categorization, control selection, implementation, and assessment.
• Develop and maintain SSP, SAR, and POA&M documentation.
• Manage security posture in eMASS and ensure data accuracy.
• Implement and manage continuous monitoring to track vulnerabilities and config changes.
• Coordinate with system owner, AO, and stakeholders on risk and compliance status.

Skills

RMF Execution

eMASS Management

Vulnerability Scanning

Stakeholder Coordination

Security Documentation

Education

BA/BS Degree

Tools

ACAS

Nessus

SCAP

Job description

The Senior RMF Specialist/ISSO is responsible for guiding IT systems through the entire Risk Management Framework (RMF) lifecycle to achieve and maintain the Authority to Operate (ATO) for US Army G2's Intelligence Division (AMIS-IN), Security Division (AMIS-SE), and the Special Projects Office (SPO) (AMIS-SEP).

Requirements

RMF Execution: Lead all aspects of the RMF process, from system categorization and security control selection to implementation and assessment.

Security Documentation: Develop, maintain, and update all required RMF documentation, including the System Security Plan (SSP), Security Assessment Report (SAR), and Plan of Action & Milestones (POA&M).

eMASS Management: Manage the system's security posture within the Enterprise Mission Assurance Support System (eMASS), ensuring all data is accurate and up to date.

Continuous Monitoring: Implement and manage a robust continuous monitoring strategy to actively assess security control effectiveness, track vulnerabilities, and manage configuration changes.

Stakeholder Coordination: Serve as the primary security advisor to the system owner and liaise with the Authorizing Official (AO) and other key stakeholders to ensure a clear understanding of system risks and compliance status.

Minimum Qualifications

Clearance: Must possess and maintain a Top Secret/SCI security clearance.

Experience: BA/BS with a minimum 5+ years of hands‑on experience dedicated to applying RMF to complex DoD IT systems.

Certifications: Possess current, industry‑standard certifications relevant to their specific duties (e.g., CompTIA Security+, CCNA, RHCSA, MCSA). Certifications must meet DoD 8570/8140 requirements for their assigned role (e.g., IAT Level II).

Technical Skills: Demonstrated mastery of eMASS, vulnerability scanning tools (e.g., ACAS/Nessus), COMSEC, and security compliance checkers (e.g., SCAP).

Physical Requirements

• Must be able to remain in a stationary position for up to 50% of the time.
• Must be able to deliver clear and effective communication verbally and via email, phone, and virtual communication platforms to interface with co‑workers and customers.
• Must be able to occasionally move about inside an office environment to access file cabinets, office machinery, and communicate with co‑workers.

Equal Opportunity Employer QBE, LLC is an Equal Opportunity Employer. We consider all qualified applicants without regard to race, color, religion, sex, national origin, disability, veteran status, or any other protected status under applicable law.