RMF Cybersecurity Lead — DoD/Navy Assurance

International Executive Service Corps; San Diego (CA); On-site; USD 140,000 - 180,000; Full time

Job summary

International Executive Service Corps seeks a Cybersecurity Lead to perform independent RMF assessments for DoD/NAVSEA programs. The role requires active TS/SCI clearance, a Navy QV Level III, and IAM II/III certifications.

You will review SSPs, data flows, and vulnerability data while producing SAR/RAR and mentoring ISSMs/ISOs. The candidate will operate under strict independence, validate NIST 800-53 controls, and work in DoD cybersecurity environments with high risk impact, contributing to

Qualifications

• Active TS/SCI clearance and U.S. citizenship.
• Bachelor's degree in CS/IA/Cybersecurity from an accredited institution.
• 7+ years of cybersecurity experience with 4+ years RMF DoD validation.
• Current Navy Qualified Validator (NQV) Level III.
• Active IAM Level II or III baseline certification (e.g., CAP, CASP+, CISM, CISSP).
• Deep technical expertise in vulnerability data interpretation and cryptographic implementations.
• Proven ability to produce detailed risk assessment reports for senior government consumption.

Responsibilities

• Conduct independent, comprehensive assessments of DoD/ DON/ NAVSEA IT, PIT, and OT systems.
• Maintain independence from system engineering, ISSM, and ISSO during validation.
• Act as Trusted Agent to Navy SCA and SCAL with objective, risk-based recommendations.
• Review SSPs, architecture diagrams, data flow diagrams, and baselines for accuracy.
• Validate NIST 800-53 controls by reviewing test evidence and interviewing personnel.
• Analyze ACAS, STIG checklists, and manual test data to identify residual risks.
• Generate SAR and RAR with clear articulation of impact of vulnerabilities.
• Review POA&M entries ensuring mitigations are technically sound and resourced.
• Perform extensive eMASS reviews and update control validation status.
• Provide mentorship to ISSMs and ISSOs on artifact quality and control interpretation.
• Support continuous monitoring and POA&M closure activities.
• Maintain registration on the Navy Qualified Validators registry.

Skills

RMF assessments

NIST 800-53

Vulnerability analysis

Report writing

eMASS familiarity

Education

Bachelor's degree in CS/IA/Cybersecurity

Tools

eMASS

ACAS

STIGs

Job description

International Executive Service Corps seeks a Cybersecurity Lead to perform independent RMF assessments for DoD/NAVSEA programs. The role requires active TS/SCI clearance, a Navy QV Level III, and IAM II/III certifications.

You will review SSPs, data flows, and vulnerability data while producing SAR/RAR and mentoring ISSMs/ISOs. The candidate will operate under strict independence, validate NIST 800-53 controls, and work in DoD cybersecurity environments with high risk impact, contributing to