Logo
ASRC Federal

Risk Management Framework (RMF) Analyst

ASRC Federal, Alexandria, Virginia, us, 22350

Save Job

Summary

ASRC Federal is seeking a qualified Risk Management Framework (RMF) Analyst to support a DoDEA client headquartered in Alexandria, VA. Onsite work is required, but some telework is possible upon government authorization. ASRC Federal is a leading government contractor furthering missions in space, public health and defense. As an Alaska Native owned corporation, our work helps secure an enduring future for our shareholders. Join our team and discover why we are atop veteran employer and Certified Great Place to Work. Responsibilities

Conduct annual Assessment and Authorization (A&A) package reviews for completeness and accuracy, including System Security Plans, Privacy Threshold Assessments, Contingency Plans, and other artifacts. Review and revise A&A documentation in eMASS to ensure consistency, accuracy, and compliance with DoD and DoDEA standards. Implement and maintain continuous monitoring strategies, including documentation of security control effectiveness. Create Security Assessment Plans (SAP), Rules of Engagement (ROE), and Security Assessment Reports (SAR). Perform security control assessments using eMASS and generate supporting deliverables, such as Security Categorization Reviews and implementation validation. Support the development and sustainment of Memoranda of Agreement (MOA) and Memoranda of Understanding (MOU) focused on shared/inherited security controls. Prepare monthly reports outlining the status and metrics of A&A documentation and provide recommendations for improvements to the A&A process. Assist in implementing security controls as per DoDEA’s System Security Plans, ensuring alignment with mandatory configuration and federal policies. Identify non-compliant security controls and develop Plan of Action & Milestones (POA&Ms), including tracking milestones in eMASS. Develop strategies for the continuous monitoring of security controls and system/environment changes. Qualifications

Active SECRET security clearance. Bachelor's degree required, and 2 years related experience minimum. Tier 3 background investigation clearance (NACLC). Minimum IAT Level II or III certification (in accordance with DoDD 8140.01). Experience supporting RMF and cybersecurity compliance within DoD environments. Familiarity with eMASS, DISA STIGs, and other DoD cybersecurity tools. Strong organizational, documentation, and technical writing skills. Clearance Requirement: Active SECRET security clearance required. Must be a U.S. Citizen and meet DoD ADP Level II requirements. Benefits and Other Information

We invest in the lives of our employees, both in and out of the workplace, by providing competitive pay and benefits packages. Benefits offered may include health care, dental, vision, life insurance; 401(k); education assistance; paid time off including PTO, holidays, and any other paid leave required by law. EEO Statement

ASRC Federal and its subsidiaries are Equal Opportunity employers. All qualified applicants will receive consideration for employment without regard to race, gender, color, age, sexual orientation, gender identity, national origin, religion, marital status, ancestry, citizenship, disability, protected veteran status, or any other factor prohibited by applicable law.

#J-18808-Ljbffr