RMF Analyst III: Cybersecurity Compliance Lead

Chenega Corporation; Northern (KY); Hybrid; USD 95,000 - 130,000; Full time

Job summary

Chenega MIOS is seeking an experienced RMF Analyst III to support the Army Materiel Command CIO through RMF analysis, ATO packages, and eMASS documentation. You will coordinate with control assessors, develop security plans, and track remediation efforts to ensure regulatory compliance and secure systems.

The role requires a Secret clearance (with potential TS/SCI eligibility), DoD RMF experience, and strong documentation skills.

Qualifications

• Bachelor's degree in science, technology, engineering, IT, or business-related fields.
• 5+ years of experience in Cybersecurity compliance and RMF.
• 5+ years with RMF (NIST SP800-53, SP 800-37 DoDI 8510.01), ATO packages, POA&M development, and system categorization.
• Active Secret clearance with ability to obtain TS/SCI eligibility.
• Background check and drug screening.
• Security+ or equivalent baseline certification (DoD 8570.01-M).
• Experience with eMASS is required.
• CISSP/CISA/CISM/CGRC certifications preferred.

Responsibilities

• Assist with RMF analysis, ATO packages, and eMASS documentation.
• Coordinate with stakeholders and control assessors for security and compliance.
• Prepare weekly reports to senior task lead.
• Develop and maintain RMF documentation and SSPs.
• Oversee cybersecurity lifecycle from inception to completion.
• Create POA&M and remediation plans with realistic schedules.
• Evaluate design/implementation against RMF requirements.

Skills

RMF knowledge

ATO packages

eMASS experience

POA&M development

Cybersecurity frameworks

Stakeholder coordination

Documentation

Cloud awareness

Education

Bachelor's degree

DoD 8570 training

Tools

eMASS

Unix/Linux

MS Office

AWS

Job description

Chenega MIOS is seeking an experienced RMF Analyst III to support the Army Materiel Command CIO through RMF analysis, ATO packages, and eMASS documentation. You will coordinate with control assessors, develop security plans, and track remediation efforts to ensure regulatory compliance and secure systems.

The role requires a Secret clearance (with potential TS/SCI eligibility), DoD RMF experience, and strong documentation skills.