RMF Security Control Assessor Liaison (Remote)

JMA Resources; Mechanicsburg (Cumberland County); Remote; USD 110,000 - 135,000; Full time

Job summary

JMA Resources is seeking a Security Control Assessor Liaison to coordinate RMF activities, support DoD/Federal compliance and drive remediation through POA&Ms. You will liaise with assessment teams, system owners and officials to ensure findings are clearly communicated and addressed.

The role emphasizes strong RMF knowledge, security documentation, and the ability to translate complex technical findings for both technical and non-technical audiences, with a remote work option within the United

Qualifications

• 7+ years of relevant experience in cybersecurity or related areas.
• Experience as SCA or in security assessment roles (e.g., Navy Validator).
• Experience supporting RMF assessments and A&A activities.
• Hands-on with STIG Manager, eMASS, Nessus, eMASSTer and Splunk.

Responsibilities

• Facilitate communication between assessors, stakeholders and teams to clarify findings and requirements.
• Support planning and execution of security control assessments with the RMF process.
• Prepare and maintain security documentation for DoD and federal requirements.
• Analyze gaps and help develop POA&Ms and remediation strategies.
• Support A&A activities throughout the RMF lifecycle.
• Ensure policies, controls, standards and resources are applied correctly.
• Coordinate with system owners and officials to advance assessment activities and resolve findings.
• Perform other related duties as needed.

Skills

RMF knowledge

NIST 800-37/800-53

Vulnerability management

Security assessment

Communication

Stakeholder collaboration

DoD/federal regulations

Education

Bachelor's degree in Computer Science / Cybersecurity / Information Systems

CompTIA Security+ CE

CCNA Security

CSA+

GICSP

SSCP

Tools

STIG Manager

eMASS

Nessus

eMASSTer

Splunk

Job description

JMA Resources is seeking a Security Control Assessor Liaison to coordinate RMF activities, support DoD/Federal compliance and drive remediation through POA&Ms. You will liaise with assessment teams, system owners and officials to ensure findings are clearly communicated and addressed.

The role emphasizes strong RMF knowledge, security documentation, and the ability to translate complex technical findings for both technical and non-technical audiences, with a remote work option within the United