Risk Management Framework (RMF) Analyst

FEDITC; Shiloh (IL); On-site; USD 95,000 - 105,000; Full time

Benefits offered by this job

Medical

Vision

401K with 4% match

Paid Time Off (PTO)

Life and Disability Insurance

Employee Assistance Program

Flexible Spending Accounts (FSA)

Dependent Care Reimbursement Program

Group Term Life Insurance

Supplemental Life and A&D Insurance

Short & Long-Term Disability

Life Discount Program

Job summary

A leading cybersecurity firm is seeking a Contract Support Specialist/Recruiter to support RMF lifecycle and cybersecurity compliance efforts. The ideal candidate must have a Bachelor's degree in Cybersecurity, 3 years of relevant experience, and an active Secret DoD Security Clearance. Responsibilities include managing RMF documentation and supporting audits. This full-time role is based in Scott AFB, Illinois.

Qualifications

• Minimum of 3 years of hands-on experience supporting RMF or similar compliance frameworks.
• Knowledge of NIST RMF standards (800-37, 800-53, 800-30).
• Active DoD 8570.01-M certification (e.g., Security+, CAP, or CISSP).

Responsibilities

• Support execution of the full RMF lifecycle for assigned systems.
• Develop, review, and maintain RMF documentation including SSPs, SARs, and POA&Ms.
• Conduct risk assessments and control validation activities according to guidelines.

Skills

Hands-on experience with RMF lifecycle

Excellent documentation skills

Collaboration skills

Strong communication skills

Ability to work independently

Education

Bachelor’s degree in Cybersecurity or related field

Tools

eMASS

ACAS

STIGs

SCAP tools

Job description

Contract Support Specialist/Recruiter at FedITC LLC

4 days ago Be among the first 25 applicants

This range is provided by FEDITC. Your actual pay will be based on your skills and experience — talk with your recruiter to learn more.

Base pay range

$95,000.00/yr - $105,000.00/yr

Direct message the job poster from FEDITC

Overview of position

FEDITC is seeking a Risk Management Framework (RMF) Analyst to support cybersecurity compliance and accreditation efforts for federal systems. The ideal candidate will have hands‑on experience with the RMF lifecycle, excellent documentation skills, and the ability to collaborate effectively with cross‑functional teams to achieve and maintain system Authorization to Operate (ATO). A United States Citizenship and active Secret DoD Security Clearance is required to be considered for this position.

Responsibilities

• Support execution of the full RMF lifecycle (Categorization, Selection, Implementation, Assessment, Authorization, and Monitoring) for assigned systems.
• Develop, review, and maintain RMF documentation including System Security Plans (SSPs), Security Assessment Reports (SARs), POA&Ms, Contingency Plans, and other artifacts.
• Conduct risk assessments and control validation activities in accordance with NIST SP 800-53 and other relevant guidelines.
• Coordinate with ISSMs, system owners, engineers, and assessors to ensure control implementation, evidence collection, and audit readiness.
• Perform continuous monitoring activities and maintain ongoing system security posture.
• Track and manage system accreditation status using tools such as eMASS, XACTA, or equivalent.
• Assist with internal and external security audits and inspections.
• Identify and recommend risk mitigation strategies to ensure compliance and enhance security.

Qualifications

Experience/Skills

• Bachelor’s degree in Cybersecurity, Information Systems, or a related technical field.
• Minimum of 3 years of hands‑on experience supporting RMF or similar compliance frameworks.
• Knowledge of NIST RMF standards (800-37, 800-53, 800-30).
• Experience with cybersecurity tools and risk management platforms (e.g., eMASS, ACAS, STIGs, SCAP tools).
• Active DoD 8570.01‑M certification (e.g., Security+, CAP, or CISSP).
• Strong written and verbal communication skills.
• Ability to work independently and collaboratively in a fast‑paced environment.
• Active U.S. government security clearance (Secret or higher preferred).

Preferred Qualifications

• Experience with DoD or federal civilian accreditation processes.
• Experience transitioning systems from DIACAP to RMF.
• Familiarity with cloud security compliance (FedRAMP, AWS/Azure controls)

Clearance

• Active Secret Security Clearance is required.
• Must be a US Citizen and pass a background check.
• Maintain applicable security clearance(s) at the level required by the client and/or applicable certification(s) as requested by FEDITC and/or required by FEDITC’S Client(s)/Customer(s)/Prime contractor(s).

Benefits

• Medical
• Vision
• 401K with 4% match
• Paid Time Off (PTO)
• Life and Disability Insurance
• Employee Assistance Program
• Flexible Spending Accounts (FSA)
• Dependent Care Reimbursement Program
• Group Term Life Insurance
• Supplemental Life and A&D Insurance
• Short & Long‑Term Disability
• Life Discount Program

Seniority level

Mid‑Senior level

Employment type

Full‑time

Job function

Information Technology

Job location

Scott AFB, IL

FEDITC, LLC is committed to fostering an inclusive workplace and provides equal employment opportunities (EEO) to all employees and applicants for employment. We do not employ AI tools in our decision‑making processes. Regardless of race, color, religion, sex (including pregnancy), sexual orientation, gender identity or expression, national origin, age, disability, genetic information, marital status, amnesty, or status as a covered veteran, FEDITC, LLC. ensures that all employment decisions are made in accordance with applicable federal, state, and local laws.