What are the responsibilities and job description for the RMF Analyst position at Nationwide IT Services?
RMF Analyst
Secret Clearance
THIS IS A HYBRID SCHEDULE WITH 3 DAYS ONSITE AT QUANTICO, VA
Nationwide IT Services (NIS) is seeking a RMF Analyst to deliver cybersecurity authorization and compliance services. The analyst will assist in all phases of the Risk Management Framework (RMF) process related to development and maintenance activities for the Office of the CIO (OCIO), in accordance with DoD and DCSA OCIO policies and RMF compliance standards.
Required Skills & Experience:
Professional Certifications:
About Nationwide IT Services
NIS is a CVE-verified Service-Disabled Veteran-Owned Small Business specializing in IT and Management Consulting. We focus on delivering mission-critical services to federal clients, leveraging cutting-edge technology and industry best practices.
Why Join NIS?
Equal Employment Opportunity
Nationwide IT Services, Inc. provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, gender, national origin, sexual orientation, gender identity, disability, or protected veteran status.
Secret Clearance
THIS IS A HYBRID SCHEDULE WITH 3 DAYS ONSITE AT QUANTICO, VA
Nationwide IT Services (NIS) is seeking a RMF Analyst to deliver cybersecurity authorization and compliance services. The analyst will assist in all phases of the Risk Management Framework (RMF) process related to development and maintenance activities for the Office of the CIO (OCIO), in accordance with DoD and DCSA OCIO policies and RMF compliance standards.
- Develop security plans, as well as assessment reports, plans of action and milestones for remediation. Defines criticality or sensitivity of systems, performs categorization calculations, and recommends corrective action.
- Recommend baseline security controls, assesses changes in controls, and coordinates changes to security authorizations.
- Conduct evaluations to verify that design and implementation meet requirements.
- Prepare test plans and conducts security control testing IAW with NIST SP800-53.
- Implement security controls, and produce artifacts required for authorization.
- Assist with continuous monitoring and security control, risk, and vulnerability assessments, creating rules for scans and providing recommendations for implementation and mitigation/remediation.
- Provide Enterprise Mission Assurance Support Service (eMASS) package accreditation to include artifact creation, modification, and sustainment support. Captures, assesses, maintains, and reports asset information.
- Evaluate proposed new products and protocols for impact to the accreditation posture.
- Provide input into the Activity Report.
Required Skills & Experience:
- BA/BS.
- Two to Four (2-4) or more years of experience in Risk Management Framework.
- Secret Clearance.
- eMASS and/or Xacta experience is required (preferably eMASS).
- Minimum of two years of experience.
Professional Certifications:
- CSSP-A or CSSP-M,
- Certification in one of the following areas, CEH< CFR, CSA , GCIA, GCIH, GICSP, SCYBER, CISM, CISSP-ISSMP
About Nationwide IT Services
NIS is a CVE-verified Service-Disabled Veteran-Owned Small Business specializing in IT and Management Consulting. We focus on delivering mission-critical services to federal clients, leveraging cutting-edge technology and industry best practices.
- Competitive compensation
- Remote flexibility
- Medical, Dental, and Vision Insurance
- 401(k) with Employer Match
- Generous PTO, Holidays, and Sick Leave
- Education Reimbursement & Professional Development
- Pet Insurance & Employee Assistance Program
Nationwide IT Services, Inc. provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, gender, national origin, sexual orientation, gender identity, disability, or protected veteran status.
