RMF Analyst

Nationwide IT Services•Quantico Base, VA

2d•$100,000 - $110,000

About The Position

Nationwide IT Services (NIS) is seeking an RMF Analyst to deliver cybersecurity authorization and compliance services. The analyst will assist in all phases of the Risk Management Framework (RMF) process related to development and maintenance activities for the Office of the CIO (OCIO), in accordance with DoD and DCSA OCIO policies and RMF compliance standards.

Requirements

Four-year degree
Two to four (2-4) or more years of experience in Risk Management Framework.
Secret Clearance.
eMASS and/or Xacta experience is required (preferably eMASS).
Minimum of two years of experience.
Required Certifications: IAT Level lll
CSSP-A or CSSP-M
Certification in one of the following areas, CEH< CFR, CSA+, GCIA, GCIH, GICSP, SCYBER, CISM, CISSP-ISSMP

Responsibilities

Develop security plans, as well as assessment reports, plans of action, and milestones for remediation.
Define criticality or sensitivity of systems, perform categorization calculations, and recommend corrective action.
Recommend baseline security controls, assess changes in controls, and coordinate changes to security authorizations.
Conduct evaluations to verify that design and implementation meet requirements.
Prepare test plans and conduct security control testing in accordance with NIST SP800-53.
Implement security controls and produce artifacts required for authorization.
Assist with continuous monitoring and security control, risk, and vulnerability assessments, creating rules for scans and providing recommendations for implementation and mitigation/remediation.
Provide Enterprise Mission Assurance Support Service (eMASS) package accreditation to include artifact creation, modification, and sustainment support.
Captures, assesses, maintains, and reports asset information.
Evaluate proposed new products and protocols for impact on the accreditation posture.
Provide input into the Activity Report.