RMF Security Controls Assessor — Onsite

Insight Global; O'Fallon (IL); On-site; USD 75,000 - 120,000; Full time

Benefits offered by this job

On-site at Scott Air Force Base

Job summary

Insight Global is seeking a security-focused assessor to perform RMF evaluations on-site at Scott Air Force Base, reviewing SSPs, POA&Ms, and authorization packages. You will work with DoD cybersecurity requirements, coordinate RMF activities in eMASS, and support leadership in risk decisions.

Responsibilities include conducting control assessments, identifying gaps, and maintaining accurate compliance records while collaborating with system owners and cybersecurity teams.

Qualifications

• Experience reviewing security documentation: SSPs, POA&Ms, RMF Packages.
• Evaluate artifacts and authorization packages for risks and non-compliance.
• Perform RMF validation activities and provide remediation guidance.
• Coordinate authorization packages for leadership review and approval.
• Collaborate with cybersecurity teams and system owners on RMF requirements.

Responsibilities

• Conduct security control assessments and RMF documentation reviews for DoD compliance.
• Identify risks, gaps, and areas of non-compliance in security artifacts.
• Validate RMF activities within eMASS and provide recommendations.
• Prepare and coordinate authorization packages for leadership review.
• Collaborate with stakeholders to guide RMF processes and security requirements.
• Track package status and maintain cybersecurity compliance records.

Skills

RMF assessment

SSP/POAM review

Security documentation review

eMASS familiarity

Risk assessment & remediation

DoD cybersecurity requirements

Tools

eMASS

Job description

Insight Global is seeking a security-focused assessor to perform RMF evaluations on-site at Scott Air Force Base, reviewing SSPs, POA&Ms, and authorization packages. You will work with DoD cybersecurity requirements, coordinate RMF activities in eMASS, and support leadership in risk decisions.

Responsibilities include conducting control assessments, identifying gaps, and maintaining accurate compliance records while collaborating with system owners and cybersecurity teams.