RMF Risk Management Analyst - NIST & DoD Security Expert

Booz Allen Hamilton

Suffolk (VA)

On-site

USD 62,000 - 141,000

Full time

5 days ago

Be an early applicant

Get more replies from employers

Send a job-specific resume in minutes.

Job summary

Booz Allen Hamilton seeks a seasoned RMF Analyst to ensure NIST-based security control implementation for complex DoD information systems. You will support full ATO certification, measure risk, review system documentation, and develop findings reports.

Targeted for candidates with 5+ years in RMF/CSF guidance and DoD policies, with TS-level considerations. Required are bachelor-level credentials in engineering, CS, cybersecurity, IT, or information systems and familiarity with eMASS and related

Qualifications

5+ years of experience providing security guidance using NIST, RMF, CSF, DoD, and local security policies.
Experience using eMASS to document and track the RMF process for an ATO package.
Experience planning and executing security controls, analyzing assessment procedures, and using required tools.
Experience interfacing with information assurance managers, including preparing and reviewing SSPs, risk assessment reports, implementation plans, A&A, etc.
Knowledge of NIST contingency planning, POA&M management, and DoD continuous auditing, monitoring, and assurance.

Responsibilities

Provide RMF guidance and ensure compliance for DoD information systems.
Support ATO certification, risk management, measuring risk, and reporting findings.
Review SSPs, risk assessments, implementation plans, A&A, C&A packages, and POA&Ms.
Demonstrate subject matter expertise in NIST RMF/CSF guidance.