Cybersecurity RMF Manager at ASM Research

United States

<p>The Cybersecurity RMF Manager is responsible for providing comprehensive cybersecurity authorization and accreditation services in support of the Risk Management Framework (RMF) process for USACE systems, networks, and applications. This role involves collaborating with system owners, cybersecurity teams, and technical teams to advance through all six steps of the RMF process, developing security plans, generating assessment reports, formulating remediation plans, and ensuring compliance with DoD, Army, and USACE policies and procedures.</p> <h2>Key Responsibilities</h2> <ul> <li>Lead organizations through all six steps of the DoD Risk Management Framework (RMF) process</li> <li>Categorize information systems based on FIPS 199 and NIST SP 800-53 standards</li> <li>Develop comprehensive security plans and control selection documentation</li> <li>Coordinate security control implementation and system-specific security testing</li> <li>Generate assessment reports and security control assessment documentation</li> <li>Develop remediation plans and implement corrective actions for identified vulnerabilities</li> <li>Manage Security Authorization Agreements (SAA) and Authority to Operate (ATO) processes</li> <li>Maintain RMF documentation in approved repositories such as eMASS (Enterprise Mission Assurance Support Service)</li> <li>Monitor security states and ensure continuous compliance with security controls</li> <li>Serve as subject matter expert on RMF processes, DISA requirements, and security authorization best practices</li> <li>Prepare security authorization briefings and compliance reports for government stakeholders</li> </ul> <h2>Required Qualifications</h2> <ul> <li>Bachelor's degree in Cybersecurity, Information Technology, or related field (or equivalent work experience)</li> <li>8+ years of experience in cybersecurity roles with strong background in Risk Management Framework (RMF) process</li> <li>Expert-level knowledge of DoD, Army, and USACE cybersecurity policies and procedures</li> <li>Demonstrated proficiency in developing security plans and generating assessment reports</li> <li>Extensive experience with categorizing information systems and selecting/implementing security controls</li> <li>Proficiency in producing DISA-required artifacts and documenting RMF data in approved repositories (eMASS)</li> <li>Strong analytical, problem-solving, and communication skills</li> </ul> <h2>Preferred Qualifications</h2> <ul> <li>CISSP (Certified Information Systems Security Professional) or CISM (Certified Information Security Manager) certification</li> <li>Certified Authorization Professional (CAP) certification from (ISC)²</li> <li>Familiarity with DoD and/or USACE IT environment and RMF implementation practices</li> <li>Experience with eMASS platform for RMF documentation and artifact management</li> <li>Knowledge of NIST SP 800-53 security controls and continuous monitoring frameworks</li> <li>Background in federal IT security authorization and compliance</li> <li>Experience with system categorization (FIPS 199, NIST SP 800-30 risk assessment)</li> </ul> <h2>Required Skills</h2> <ul> <li>Risk Management Framework (RMF) Process Management </li> <li>NIST Security Controls &amp; Implementation </li> <li>Security Authorization &amp; ATO Management </li> <li>Security Plan Development &amp; Documentation </li> <li>DISA Compliance &amp; Artifact Development </li> </ul> <h2>Preferred Skills</h2> <ul> <li>eMASS Platform Administration </li> <li>DoD &amp; USACE Security Policies </li> <li>Continuous Monitoring &amp; Security State Management </li> <li>Risk Assessment &amp; Threat Analysis </li> <li>Federal Authorization Frameworks </li> </ul> <strong><span>Qualifications</span></strong> <p><strong>Compensation Ranges</strong></p> <p>Compensation ranges for ASM Research positions vary depending on multiple factors; including but not limited to, location, skill set, level of education, certifications, client requirements, contract-specific affordability, government clearance and investigation level, and years of experience. The compensation displayed for this role is a general guideline based on these factors and is unique to each role. Monetary compensation is one component of ASM's overall compensation and benefits package for employees.</p> <p> </p> <p><strong>EEO Requirements</strong></p> <p>It is the policy of ASM that an individual's race, color, religion, sex, disability, age, sexual orientation or national origin are not and will not be considered in any personnel or management decisions. We affirm our commitment to these fundamental policies.</p> <p> </p> <p>All recruiting, hiring, training, and promoting for all job classifications is done without regard to race, color, religion, sex, disability, or age. All decisions on employment are made to abide by the principle of equal employment.</p> <p> </p> <p>Physical Requirements</p> <p>The physical requirements described in "Knowledge, Skills and Abilities" above are representative of those which must be met by an employee to successfully perform the primary functions of this job. (For example, "light office duties' or "lifting up to 50 pounds" or "some travel" required.) Reasonable accommodations may be made to enable individuals with qualifying disabilities, who are otherwise qualified, to perform the primary functions.</p> <p> </p> <p><strong>Disclaimer</strong></p> <p>The preceding job description has been designed to indicate the general nature and level of work performed by employees within this classification. It is not designed to contain or be interpreted as a comprehensive inventory of all duties, responsibilities and qualifications required of employees assigned to this job.</p>