Senior DoD Risk Management Framework SME

Resource Management Concepts, Inc. • Charleston, SC

9d • Hybrid

About The Position

Resource Management Concepts, Inc. (RMC) is seeking a Senior DoD RMF Common Control Provider (CCP) Specialist to support an essential federal agency mission. The role serves as the primary authoritative liaison for inheritable enterprise security controls, ensuring foundational computing environments, cloud environments, and enterprise enclaves correctly author, validate, and publish common controls inherited by downstream tenant mission systems.

This high-visibility contractor role combines technical expertise in security frameworks with strategic stakeholder communication. The position is contingent on contract award and position availability. It offers a highly flexible hybrid schedule, with part-time on-site work at RMC’s secure facility in Charleston, South Carolina, and remaining days eligible for telework. The role may also require commuting to project sites in Charleston or the National Capital Region.

Requirements

• Bachelor’s degree in Cybersecurity, Computer/Electrical/Electronics Engineering, or Mathematics with a computer science concentration, or equivalent.
• TS/SCI DoD clearance and ability to obtain a CI polygraph.
• At least 5 years implementing NIST SP 800-37 Rev. 2 (RMF) and NIST SP 800-53 controls in federal or DoD environments.
• Proficiency documenting and managing risk packages in eMASS.
• Meet DoD 8140/8570 IAM Level II or III certification requirements, such as CISSP, CISM, or CAP/ISC2 CGRC.
• Ability to commute to project sites in Charleston, South Carolina, or the National Capital Region.

Nice To Haves

• Master’s degree in a listed field or equivalent.
• Intelligence Community experience.
• Experience managing security control allocation for AWS GovCloud, Azure Government, or federal multi-tenant data centers.
• Strong advisory skills, including explaining complex risk methodologies to GS-15 and SES stakeholders.
• Familiarity with CSSP alignment and Cloud Landing Zone security.

Responsibilities

• Develop, maintain, and expand the agency’s enterprise-level Common Control Provider authorization packages in eMASS.
• Provide technical guidance to tenant System Owners and Information System Security Officers on inheriting physical, operational, and technical controls.
• Audit and define the physical and logical security boundaries between hosting infrastructure and tenant responsibilities.
• Coordinate with independent Security Control Assessors to schedule, facilitate, and clear multi-tiered technical audits of shared platforms.
• Create, execute, and monitor complex Plans of Action and Milestones addressing enterprise-wide vulnerabilities affecting multiple systems.
• Integrate automated monitoring capabilities to move infrastructure toward a Continuous Authorization to Operate state.

Benefits

• Tuition assistance and opportunities for training, education, and certifications.
• Competitive paid vacation package.
• 11 paid federal holidays.
• High-quality, low-deductible healthcare plans.
• Pet insurance.
• Competitive 401K package.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior