Senior RMF Specialist/Information System Security Officer (ISSO)

Bravura, Inc.; Rock Island Arsenal (IL); On-site; USD 110,000 - 150,000; Full time

Job summary

Bravura, Inc. seeks an experienced Senior RMF Specialist/ISSO to guide IT systems through the RMF lifecycle to obtain and maintain ATO at Rock Island Arsenal, IL.

The role requires 5+ years of RMF experience, DoD 8570/8140 compliance, IAT Level II certification, and a TS/SCI clearance. You will manage eMASS, assess vulnerabilities, and coordinate with stakeholders to ensure security compliance.

Qualifications

• Requires 5+ years applying RMF to DoD IT systems.
• Current IAT Level II industry certifications (e.g., Security+, CCNA, RHCSA, MCSA) required.
• DoD 8570/8140 requirements for assigned role must be met.

Responsibilities

• Lead RMF execution from categorization to assessment and authorization.
• Develop and maintain SSP, SAR, and POA&M documentation.
• Manage eMASS posture and ensure data accuracy and timely updates.
• Implement and monitor continuous monitoring and track vulnerabilities.
• Coordinate with AO and system owner to communicate risks and compliance status.

Skills

RMF experience

Stakeholder coordination

Security documentation

DoD 8570 compliance

Top Secret/SCI clearance

Education

IAT Level II certification

Tools

eMASS

ACAS/Nessus

SCAP

Job description

Role: Senior RMF Specialist/Information System Security Officer (ISSO)

Location: Rock Island Arsenal, IL

Education/Certifications: Current IAT Level II industry certification required (e.g., Security+, CCNA, RHCSA, MCSA, etc.)

Years of Experience: 5+ years RMF experience

Clearance Level & Investigation: TS/SCI

IA Cert Level (DoD 8570.01): IAT Level II

Job Description: The System Security Officer / Senior RMF Specialist / ISSO is responsible for guiding IT systems through the entire Risk Management Framework (RMF) lifecycle to achieve and maintain the Authority to Operate (ATO).

Responsibilities:

• RMF Execution:
  • Lead all aspects of the RMF process, from system categorization and security control selection to implementation and assessment.
• Security Documentation:
  • Develop, maintain, and update all required RMF documentation, including the System Security Plan (SSP), Security Assessment Report (SAR), and Plan of Action & Milestones (POA&M).
• eMASS Management:
  • Manage the system's security posture within the Enterprise Mission Assurance Support System (eMASS), ensuring all data is accurate and up to date.
• Continuous Monitoring:
  • Implement and manage a robust continuous monitoring strategy to actively assess security control effectiveness, track vulnerabilities, and manage configuration changes.
• Stakeholder Coordination:
  • Serve as the primary security advisor to the system owner and liaise with the Authorizing Official (AO) and other key stakeholders to ensure a clear understanding of system risks and compliance status.

Qualifications:

The System Security Officer / Senior RMF Specialist / ISSO must have the following minimum qualifications for eligibility:

• Experience:
  • Requires a minimum 5+ years of hands-on experience dedicated to applying RMF to complex DoD IT systems.
• Certifications:
  • Must possess at a minimum current IAT level II, industry-standard certifications relevant to specific duties (e.g., CompTIA Security+, CCNA, RHCSA, MCSA).
  • Certifications must meet DoD 8570/8140 requirements for their assigned role.
• Technical Skills:
  • Demonstrated mastery of eMASS, vulnerability scanning tools (e.g., ACAS/Nessus), COMSEC, and security compliance checkers (e.g., SCAP).
• Clearance;
  • Must possess and maintain a Top Secret/SCI security clearance.
  • Must be U.S. citizen.