Risk Management Framework (RMF) Specialist - (Onsite - Belleville, IL)

geocgi • Saint Louis, MO

21h • Onsite

About The Position

Geo CGI is seeking an experienced Risk Management Framework Specialist to oversee and manage cybersecurity processes and ensuring compliance for the United States Air Force Program at Scott Air Force Base, Illinois (St. Louis area). The Risk Management Framework Specialist is responsible for implementing and maintaining the RMS process within the organization, specifically for systems and applications deployed on Amazon Web Services (AWS) cloud infrastructure. The Risk Management Framework Manager/Specialist will also be responsible for preparing and maintaining Authority to Operate (ATO) documents, as well as providing guidance and training to other members of the organization on RMF-related matters. This position’s location is at U.S. Scott Air Force Base in Illinois (St. Louis area- Belleville, Illinois).

Requirements

• US Citizen with a DoD Top Secret/SCI Clearance or ability to obtain and maintain.
• Minimum of a Bachelor’s degree in Cybersecurity, Information Technology, Computer system or related field.
• 5+ years of hands-on experience in Cybersecurity with a minimum of 3 years specializing in Risk Management Framework processes and DoD information systems
• Proficiency in Risk Management Framework tools and technologies, such as eMASS (Enterprise Mission Assurance Support Service) and vulnerability assessment tools (e.g., Nessus, ACAS, SCAP).
• In-depth knowledge of NIST Special Publications (SP) 800-37, 800-53, and 800-171, as well as DoD Instruction 8510.01 and related guidelines.
• Excellent verbal and written communication skills, with the ability to clearly explain complex cybersecurity concepts to both technical and non-technical audiences.
• Skilled in communicating effectively with military command staff, contractors, and civilians, ensuring clear and concise information exchange across diverse groups and stakeholders.
• Ability to manage multiple projects, meet deadlines, and work both independently and collaboratively, with a passion for location-based problem-solving to support business and mission-critical challenges.
• Proficient with Microsoft Office Suite (Word, Excel, PowerPoint, Outlook).

Nice To Haves

• CompTIA Security+ Certification.
• Certified Information Systems Security Professional (CISSP).
• Certified Authorization Professional (CAP).

Responsibilities

• Lead the implementation of the Risk Management Framework (RMF) for the U.S. Air Force information systems, ensuring compliance with Department of Defense (DoD) and U.S. Air Force cybersecurity polities.
• Conduct security control assessments and validate the effectiveness of implemented controls for information systems.
• Perform risk assessments to identify vulnerabilities, threats and risks to information systems and recommend appropriate mitigation strategies for implementation and hardening.
• Prepare and maintain Risk Management Framework documentation including but not limited to System Security Plans (SPPs), Plan of Action and Milestones (POA&Ms) and Risk Assessment Reports.
• Implement and manage continuous monitoring strategies to ensure ongoing assessment and authorization of information systems.
• Work closely with system owners, developers, and other stakeholders to ensure security requirements are integrated throughout the system development lifecycle.
• Support internal and external audits, reviews, and inspections related to information system security.
• Ensure alignment with current Air Force cybersecurity policies, standards, and regulations, and recommend updates to cybersecurity policies as needed.
• Mentor and guide junior staff in performing these tasks, providing training and support to enhance their skills and ensure adherence to best practices and U.S. Air Force standards.

Benefits

• Competitive salaries, commensurate with experience and leading Federal Contractors in the geospatial industry.
• Opportunities for upward mobility in a dynamic fast paced environment within a small company.
• Merit-based spot and end of year bonuses.
• Safe Harbor 401(k) plan with immediate vesting.
• Flexible work hours and PTO.
• Complete Medical, Dental, and Vision coverage for individuals.
• Company paid training, certifications, and professional growth and development.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior