<p>ASRC Federal is seeking a qualified Risk Management Framework (RMF) Analyst to support a DoDEA client.</p> <p>Position Summary:</p> <p>The RMF Analyst will provide support for the Department of Defense Education Activity (DoDEA) Office of the Chief Information Officer by delivering comprehensive Risk Management Framework (RMF) Assessment and Authorization (A&A) support. This position involves the assessment of information systems to ensure compliance with federal cybersecurity policies and the preparation of ATO (Authority to Operate) documentation. The RMF Analyst will serve as a subject matter expert and assist in the development and continuous monitoring of DoDEA information systems.</p> <p>Key Responsibilities:</p> <ul> <li>Conduct annual A&A package reviews for completeness and accuracy, including System Security Plans, Privacy Threshold Assessments, and other documents. </li><li>Review and revise A&A documentation in eMASS to ensure consistency and compliance with Federal and DoDEA requirements. </li><li>Implement and maintain continuous monitoring strategies and documentation. </li><li>Create Security Assessment Plans (SAP), Rules of Engagement (ROE), and Security Assessment Reports (SAR). </li><li>Perform security control assessments and generate deliverables such as categorization reviews and security plans. </li><li>Develop and sustain MOAs and MOUs focusing on shared security controls. </li><li>Prepare monthly reports and recommend improvements for A&A processes. </li><li>Assist in implementing and documenting security control measures as per organizational policies. </li><li>Identify non-compliant controls and develop POA&Ms with remediation milestones. </li><li>Develop strategies for continuous monitoring of security controls and system changes. </li></ul> <p>Required Qualifications:</p> <ul> <li>BS/BA required in addition to 5-7 years of experience with DoD cybersecurity and RMF A&A processes or equivalent. </li><li>Minimum IAT Level II or III certification (in accordance with DoDD 8140.01. </li><li>Familiarity with tools such as eMASS and DISA STIGs. </li><li>Strong technical writing and documentation skills. </li><li>This position requires the ability to obtain and maintain a government clearance, U.S. Citizenship is required. </li><li>This position requires the successful applicant to obtain and maintain the required security clearance or other authorization(s) within the necessary timeframe required by applicable contract(s). </li></ul> <p>Clearance Requirement:</p> <ul> <li>Active SECRET security clearance required. Must be U.S. Citizen and meet DoD ADP Level II requirements. </li><li>Tier 3 background investigation clearance (NACLC). </li></ul>