Risk Management Framework Authorizing Official Representative (RMF AOR)

Tech Rakers - Fort Belvoir, VA

Full-time

Fort Belvoir, VA

Professional, Scientific, and Technical Services

About the position

The Risk Management Framework Authorizing Official Representative (RMF AOR) will support the Headquarters, Department of the Army (HQDA) G-6 SAP CIO in maintaining an appropriate operational information assurance posture for various programs. This role involves utilizing the Risk Management Framework (RMF) process to provide risk management recommendations, reviewing security documentation, and acting as a liaison between security assessors and programs.

Responsibilities

• Provide recommendations to the Special Programs Office Senior Authorizing Official for risk management decisions.
• Review and evaluate Program's Body of Evidence documents including Security Controls Traceability Matrix, System Security Plans, Security Assessment Report, and Plans of Action and Milestones.
• Follow up and provide oversight on a program's execution of the Plans of Action and Milestones on a quarterly basis.
• Act as a liaison between Security Control Assessors and programs for all information system requirements.
• Participate in Army and DOD meetings, forums, and working groups to identify Army cybersecurity equities and actions, providing leadership with executive summaries.
• Research and review DOD and Army policies to determine effects on current operating standards and provide recommendations.

Requirements

• Active Top Secret security clearance with SCI eligibility.
• Bachelor's degree and 5 years of related experience in cybersecurity, or a master's degree or equivalent combination of education and work experience in IT with a strong background in secure technical implementations.
• Knowledge of DOD and NIST Risk Management Framework and Joint Special Access Program Implementation Guide.
• 5+ years of experience developing or implementing National, DOD, and Army Cybersecurity strategies, policies, and procedures.
• DOD 8570 IAT II certification (CCNA Security, CySA+, GICSP, GSEC, Security+ CE, CND, or SSCP).
• Ability to travel up to 10%.

Nice-to-haves

• Ability to read technical writing and detailed documentation of networks, systems, applications, and personnel procedures.
• Experience with system and network security tools and applications.
• Ability to work in a team.
• Familiarity with SAP operations.
• Experience working on HQDA staff.
• Prior military experience.