Senior RMF Security Control Lead for DoD Cyber Compliance

NTG; Arlington (VA); On-site; USD 150,000 - 190,000; Full time

Job summary

Northern Technologies Group (NTG) seeks an experienced Security Control Accessor to provide expert RMF support for the DoD CIO’s SAP IT Cybersecurity program. You will lead RMF activities, assess systems in eMASS, and advise on ATO decisions while ensuring secure operations in highly classified SAP environments.

The role demands senior-level expertise in RMF/A&A, security controls, and enterprise-wide cyber compliance, including cross-domain architectures and SOP development.

Qualifications

• 15+ years of experience in cybersecurity with an advanced degree, or 21 years of related experience with no degree.
• Leadership in RMF/A&A efforts and system accreditation.
• Active TS/SCI clearance with eligibility for SAP access; IAT Level III or IAM Level III certifications (e.g., CISSP, CISM, CASP+)

Responsibilities

• Lead RMF activities: develop/review SSPs, SAPs, POA&Ms, SARs, SCTMs.
• Advise the Authorizing Official and support ATO decisions using SME input.
• Perform system security assessments, documentation reviews, and artifact evaluations in eMASS.
• Validate control inheritance and implementation across hybrid, cloud, AI/ML-enabled architectures.
• Develop and standardize SOPs, cybersecurity scorecards, and dashboards; support incident response docs.

Skills

RMF leadership

System accreditation

Security controls

Clearance TS/SCI

SAP access eligibility

Education

Master's degree in Cybersecurity

Bachelor's degree in Cybersecurity

Tools

eMASS

SCTM tools

Job description

Northern Technologies Group (NTG) seeks an experienced Security Control Accessor to provide expert RMF support for the DoD CIO’s SAP IT Cybersecurity program. You will lead RMF activities, assess systems in eMASS, and advise on ATO decisions while ensuring secure operations in highly classified SAP environments.

The role demands senior-level expertise in RMF/A&A, security controls, and enterprise-wide cyber compliance, including cross-domain architectures and SOP development.