On-Site Senior DoD RMF/eMASS Compliance Lead

Po'okela; Arlington (VA); On-site; USD 140,000 - 150,000; Full time

Benefits offered by this job

401K with company match

Medical, dental, disability, life ins.

Tuition reimbursement

Paid time off

11 paid holidays

Job summary

Bering-Alaka'ina Holdings, LLC is seeking a Sr Cybersecurity Compliance Specialist to support a government customer in Arlington, Virginia. This role is 100% on-site and requires U.S. citizenship and an active Top Secret clearance.

You will lead auditing efforts in eMASS, manage compliance tasks, and support ATO sustainment while addressing DoD RMF and security directives. Responsibilities include vulnerability assessments, security audits, incident response support, and delivering cybersecurity

Qualifications

• Advanced knowledge of DoD RMF, NIST directives and Army security regs.
• Ability to develop complex cybersecurity documentation, risk assessments, and exec-level presentations.
• Recent eMASS experience (last 2–3 years).

Responsibilities

• Execute continuous system auditing within eMASS and distribute tasks among stakeholders.
• Support ATO sustainment efforts and enforce DoD compliance (FISMA, RMF, PPSM, Cyber Scorecard).
• Conduct vulnerability scanning analysis and IT personnel security audits.
• Provide incident response support (including classified spillage containment) and cybersecurity awareness training.

Skills

DoD RMF

NIST directives

Army security regs

Education

B.S. in Computer Science or related field

IAM Level II certification

DoD 8140.03 / DCWF certification requirements

Tools

eMASS

Job description

Bering-Alaka'ina Holdings, LLC is seeking a Sr Cybersecurity Compliance Specialist to support a government customer in Arlington, Virginia. This role is 100% on-site and requires U.S. citizenship and an active Top Secret clearance.

You will lead auditing efforts in eMASS, manage compliance tasks, and support ATO sustainment while addressing DoD RMF and security directives. Responsibilities include vulnerability assessments, security audits, incident response support, and delivering cybersecurity