RMF Analyst

TIAG®; Frederick (MD); Remote; USD 60,000 - 100,000; Full time

Job summary

An innovative firm is seeking an RMF Analyst to provide essential Risk Management Framework support for critical systems. This role involves ensuring compliance with DoD and NIST cybersecurity policies while developing and maintaining vital cybersecurity documentation. As a key player in the cybersecurity team, you will conduct assessments, track milestones, and support continuous monitoring activities. If you have a passion for safeguarding information and a background in cybersecurity, this position offers a unique opportunity to make a significant impact in a forward-thinking environment.

Qualifications

• 2+ years of RMF lifecycle support experience for DoD or federal systems.
• Familiarity with DOD cybersecurity processes and CCL standards.

Responsibilities

• Develop and maintain RMF artifacts in eMASS, including SSPs, RARs, and POA&Ms.
• Conduct security control assessments to ensure compliance with NIST standards.

Skills

Risk Management Framework (RMF)

NIST SP 800-53

Cybersecurity Compliance

Vulnerability Management

eMASS

Education

Bachelor’s Degree in Cybersecurity

Associate's Degree with additional experience

Tools

ACAS

eMASS

Job description

TIAG is hiring an RMF Analyst to join our team. Candidates must possess an active Secret Clearance to be considered. This position is primarily remote.

The RMF Analyst will be responsible for providing direct Risk Management Framework (RMF) support for assigned systems, ensuring compliance with DoD and NIST cybersecurity policies and standards. The RMF Analyst will be responsible for developing and maintaining cybersecurity authorization documentation, supporting authorization and reauthorization efforts, and assisting with continuous monitoring activities.

Primary responsibilities will include:

• Developing, updating, and maintaining RMF artifacts in eMASS, including SSPs, RARs, SARs, and POA&Ms.
• Conducting security control assessments to ensure compliance with NIST SP 800-53 and DHA cybersecurity standards.
• Coordinating with ISOs, ISSMs, AOs, and other cybersecurity stakeholders.
• Tracking and managing RMF milestones for IATT, ATO, and reauthorization efforts.
• Supporting IV&V activities related to cybersecurity postures.
• Identifying, documenting, and assisting in mitigating vulnerabilities found during assessments.
• Supporting Continuous Monitoring by validating security control implementation.

Required Qualifications:

• Two (2) years of RMF lifecycle support experience for DoD or federal systems.
• Bachelor’s Degree in Cybersecurity, IT, Information Assurance, or related field (Associate's with additional experience may substitute).
• Experience with the NIST Risk Management Framework (RMF)
• Active Secret Clearance or current interim
• Familiarity with DOD cybersecurity processes and CCL standards
• Experience with ACAS scanning and vulnerability management
• Experience in a DoD environment
• Familiarity with eMASS
• Knowledge of HIPAA compliance requirements for medical device cybersecurity

TIAG is a federal contractor and an equal opportunity and affirmative action employer that does not discriminate and employment decisions shall be based solely on merit and without regard to race, national origin, religion, age, color, sex, sexual orientation, gender identity, disability, or protected veteran status, or any other characteristic protected by local, state, or federal laws, rules, or regulations.

This policy applies to all terms and conditions of employment. To achieve our goal of equal opportunity, TIAG maintains an affirmative action plan through which it makes good faith efforts to recruit, hire, and advance in employment qualified individuals with disabilities and protected veterans.