Risk Management Framework (RMF) Specialist

NV5; St. Louis (MO); On-site; USD 110,000 - 160,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Life insurance

FTO (Free Time Off)

401(k)

Professional development

Job summary

NV5 Geospatial seeks an experienced RMF Specialist to oversee RMF lifecycle for Air Force information systems. Lead security control assessments, risk analyses, and documentation (SSPs, POA&Ms) while ensuring continuous monitoring and authorization. Travel <20% and maintain Top Secret/SCI eligibility.

The role requires 5+ years in cybersecurity with RMF focus, DoD/DoD policy knowledge, and relevant certifications. NV5 offers a competitive package and growth within a multidisciplinary team.

Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or related field.
• Minimum of 5 years in cybersecurity with at least 3 years in RMF for DoD information systems.
• Relevant cybersecurity certifications such as CISSP or CAP preferred.
• Ability to obtain/maintain Top Secret/SCI clearance.
• Proficiency with RMF tools and DoD guidance (NIST SP 800-37/53/171, 8510.01).

Responsibilities

• Lead RMF implementation for Air Force information systems with DoD compliance.
• Conduct security control assessments and validate control effectiveness.
• Perform risk analyses to identify threats and propose mitigations.
• Prepare and maintain RMF docs: SSPs, POA&Ms, and risk reports.
• Implement continuous monitoring and ongoing authorization processes.
• Collaborate with system owners, developers, and stakeholders.
• Support audits and reviews of information system security and compliance.
• Ensure alignment with Air Force cybersecurity policies and standards.

Skills

RMF processes

DoD information systems

NIST SP 800-37/53/171

eMASS

Vulnerability assessment

Communication skills

Education

Bachelor's degree in Cybersecurity/IT/CS

Tools

eMASS

Nessus

ACAS

SCAP

Job description

Job ID
2026-12090
# of Openings
2
Location
US-MO-Saint Louis
Category
Geospatial/GIS
Type
Regular Full-Time

Risk Management Framework (RMF) Specialist

Job ID
2026-12090
# of Openings
2
Location
US-MO-Saint Louis
Category
Geospatial/GIS
Type
Regular Full-Time

Seeking a dedicated and experienced Risk Management Framework (RMF) Specialist to oversee and manage cybersecurity processes, ensuring compliance with DoD and Air Force policies. The RMF Specialist will play a critical role in safeguarding the Air Force's information systems by identifying, assessing, and mitigating security risks. This position requires a deep understanding of the RMF lifecycle and its application in a military context.

Work Environment

• Location: Scott Air Force Base - Belleville, IL (This is not a remote position)
• Security Clearance: Must possess or be able to obtain and maintain a Top Secret/SCI clearance.
• Travel < 20% of the time

NV5 is a global technology solutions and consulting services company with a workforce of over 4,500 professionals in more than 100 offices worldwide. NV5's continued growth has been spurred through strategic investments in firms with unique capabilities to help current and future customers solve the world's toughest problems. The NV5 family brings together talent across a wide range of markets and fields, including Professional Engineers, Professional Land Surveyors, Architects, Photogrammetrists, GIS Professionals, Software Developers, IT, Project Management Professionals, and more.

At NV5 Geospatial, we are a collaboration of intelligent, innovative thinkers who care for each other, our communities, and the environment. We value both heart and head, the diversity of our people, and their experiences because that is how we continue to grow as a leader in our industry and expand our individual and collective potential.

Responsibilities

• RMF Implementation: Lead the implementation of the Risk Management Framework (RMF) for Air Force information systems, ensuring compliance with DoD and Air Force cybersecurity policies.
• Security Control Assessment: Conduct security control assessments and validate the effectiveness of implemented controls for information systems.
• Risk Analysis: Perform risk assessments to identify vulnerabilities, threats, and risks to information systems, and recommend appropriate mitigation strategies.
• Documentation: Prepare and maintain RMF documentation, including System Security Plans (SSPs), Plan of Action and Milestones (POA&Ms), and Risk Assessment Reports.
• Continuous Monitoring: Implement and manage continuous monitoring strategies to ensure ongoing assessment and authorization of information systems.
• Collaboration: Work closely with system owners, developers, and other stakeholders to ensure security requirements are integrated throughout the system development lifecycle.
• Audit Support: Support internal and external audits, reviews, and inspections related to information system security.
• Policy and Compliance: Ensure alignment with current Air Force cybersecurity policies, standards, and regulations, and recommend updates to cybersecurity policies as needed.

Qualifications

Requirements

• Education: Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field.
• Experience: Minimum of 5 years of experience in cybersecurity, with at least 3 years specializing in RMF processes and DoD information systems.
• Certifications: Must possess or be willing to obtain relevant cybersecurity certifications such as Certified Information Systems Security Professional (CISSP), Certified Authorization Professional (CAP), or equivalent.
• Security Clearance: Ability to obtain and maintain a Top Secret/SCI security clearance.
• Technical Skills: Proficiency in RMF tools and technologies, such as eMASS (Enterprise Mission Assurance Support Service) and vulnerability assessment tools (e.g., Nessus, ACAS, SCAP).
• Knowledge: In-depth knowledge of NIST Special Publications (SP) 800-37, 800-53, and 800-171, as well as DoD Instruction 8510.01 and related guidelines.
• Communication: Strong verbal and written communication skills, with the ability to effectively convey complex cybersecurity concepts to both technical and non-technical audiences.
• Analytical Skills: Excellent analytical and problem-solving skills, with a keen attention to detail and a proactive approach to identifying and addressing security risks.

Competencies & Skills

• Strong problem-solving skills and the ability to troubleshoot database issues effectively.
• Excellent communication and collaboration skills for cross-team efforts.

Employment is contingent upon successful completion of a background check and drug screening.

• NV5 offers a competitive compensation and benefits package including medical, dental, life insurance, FTO, 401(k) and professional development/advancement opportunities.

NV5 provides equal employment opportunities (EEO) to all applicants for employment without regard to race, color, religion, gender, sexual orientation, gender identity or expression, national origin, age, disability, genetic information, marital status, amnesty, or status as a covered veteran in accordance with applicable federal, state and local laws. NV5 complies with applicable state and local laws governing non-discrimination in employment in every location in which the company has facilities. This policy applies to all terms and conditions of employment, including, but not limited to, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation, and training.