Support RMF lifecycle activities in accordance with DoDI 8510.01
Assist with system categorization and control selection (NIST SP 800-53)
Develop and maintain RMF artifacts including System Security Plan (SSP), Plan of Action & Milestones (POA&M), Security Control Traceability Matrix (SCTM), Security CONOPS (SECONOPS), and Incident Response Plan (IRP)
Coordinate with Authorizing Official (AO), Security Control Assessor (SCA), and Government stakeholders
Document implementation of security controls
Validate control inheritance from Government Furnished Equipment (GFE)
Develop recommendations for continuous monitoring strategy

Bachelor’s degree in Cybersecurity, Information Systems, Engineering, or related field
10+ years of experience supporting DoD cybersecurity programs
Demonstrated experience with RMF (DoDI 8510.01) implementation
Hands-on experience with eMASS
Knowledge of NIST SP 800-53 security controls
Experience supporting ATO or interim authorization efforts

Information Systems Security Officer

Key skills