Our Pensacola, FL team, supporting Military Sealift Command (MSC), has an immediate need for a Risk Management Framework (RMF) Administrator with demonstrated experience accomplishing accreditation tasks associated with obtaining and maintaining a Risk Management Framework certification for DOD networks. Primary responsibilities include:

• Serve as the lead RMF package analyst to ensure high-quality products and services are delivered to the customer
• Conduct systems security evaluations, audits, and reviews
• Conduct the Authorization and Assessment (A&A) review process ensuring that RMF cybersecurity requirements are satisfied in accordance with applicable DOD, NIST, Department of the Navy (DON), and NAVSEA series instructions
• Perform RMF package assessments using the DISA Security Technical Implementation Guides (STIGs), Security Content Automation Protocol (SCAP) and the Assured Compliance Assessment Solution (ACAS) files
• Advise the Information Systems Security Manager (ISSM) and other program stakeholders regarding A&A cybersecurity matters to include change control, Information Assurance Vulnerability Management (IAVM), EXORD's, FRAGO's, DOD and DON Policy

• Must possess current IAT II certification in accordance with IAWF DoD 8570.01M
• Must have at least 3 years’ experience evaluating cyber compliance of a system with RMF policieis
• Must have extensive knowledge and proficiency with RMF combined with eMASS or XACTA experience
• Must have extensive knowledge and proficiency with Assured Compliance Assessment Solution (ACAS) vulnerability scanner and DISA STIGs