Cyber Security/ Risk Management Framework Authorizing Official Representative (RMF AOR)

Tech Rakers - Fort Belvoir, VA

Full-time

Fort Belvoir, VA

Professional, Scientific, and Technical Services

About the position

The Risk Management Framework Authorizing Official Representative (RMF AOR) plays a critical role in the cybersecurity domain by providing recommendations to the Special Programs Office Senior Authorizing Official regarding risk management decisions. This position involves evaluating security documentation, overseeing program execution, and acting as a liaison between various stakeholders to ensure compliance with cybersecurity standards and policies.

Responsibilities

• Uses the Risk Management Framework (RMF) process to provide recommendations to the Special Programs Office Senior Authorizing Official for risk management decisions in protecting critical information and IT assets.
• Reviews and evaluates Program's Body of Evidence documents including Security Controls Traceability Matrix (SCTM), System Security Plans (SSP), Security Assessment Report (SAR), and Plans of Action and Milestones (POA&Ms).
• Follows up and provides oversight on a program's execution of the POA&Ms on a quarterly basis.
• Acts as a liaison between Security Control Assessors (SCA) and programs for all information system requirements.
• Participates in Army and DOD meetings, forums, and working groups to identify Army cybersecurity equities and actions, providing leadership with executive summaries.
• Researches and reviews DOD and Army policies to determine any effects on current operating standards and provides recommendations and comments to address concerns.

Requirements

• Active Top Secret security clearance with SCI eligibility.
• Bachelor's degree and 5 years of related experience in cybersecurity, or a master's degree or equivalent combination of related education and work experience in IT with a background in technology and a strong history of secure technical implementations.
• Knowledge of DOD and National Institute of Standards and Technology (NIST) Risk Management Framework and Joint Special Access Program Implementation Guide (JSIG).
• 5+ years of experience and knowledge developing or implementing National, DOD, and Army Cybersecurity strategies, policies, and procedures.
• DOD 8570 IAT II certification (CCNA Security, CySA+, GICSP, GSEC, Security+ CE, CND, or SSCP).
• Ability to travel up to 10%.

Nice-to-haves

• Ability to read technical writing and detailed documentation of networks, systems, applications, and personnel procedures.
• Experience with system and network security tools and applications.
• Ability to work in a team.
• Familiarity with SAP operations.
• Experience working on HQDA staff.
• Prior military experience.