Senior RMF Policy Analyst
Listed on 2026-10-11
-
IT/Tech
Cybersecurity, Information Security & Data Protection, IT Consultant, Systems Analyst
Senior RMF Policy Analyst
At K , we deliver science, technology and engineering solutions to governments and companies around the world. K employs approximately 37,000 people worldwide with customers in more than 85 countries and operations in over 28 countries. K is proud to work with its customers across the globe to provide technology, value-added services, and long-term operations and maintenance services to ensure consistent delivery with predictable results.
Trinzic is the future independent company to be created through the planned spin-off of K 's Mission Technology Solutions business, expected in January 2027. Our people work at the frontier of what is possible, delivering solutions in challenging environments and advancing some of the world's highest-priority national security and space missions.
Backed by decades of mission success, deep expertise, and trusted partnerships, Trinzic will launch as a global organization with more than 18,000 employees supporting customers around the world. Join us at a defining moment and help shape the future of a company built to tackle complex challenges and make a meaningful impact.
Candidates who join K 's Mission Technology Solutions business before the spin-off will transition to Trinzic when the separation is complete and will not need to reapply for employment.
K is seeking a highly skilled Senior RMF Policy Analyst to support cybersecurity governance, Risk Management Framework (RMF) compliance, and Assessment & Authorization (A&A) efforts within a complex Department of Defense (DoD) environment. The successful candidate will serve as a trusted cybersecurity subject matter expert responsible for developing, maintaining, and enhancing RMF policies, standard operating procedures (SOPs), training materials, and documentation that support mission-critical systems and applications.
This role requires extensive knowledge of DoD cybersecurity requirements, eMASS, NIST guidance, and DHA authorization processes, along with the ability to collaborate across technical and program teams to improve compliance, automate workflows, and ensure adherence to evolving cybersecurity standards.
The ideal candidate is a self-driven professional with strong analytical, communication, and leadership skills who can effectively manage multiple priorities while serving as a key advisor on RMF policy, cybersecurity documentation, training, and process improvement initiatives.
Role And Responsibilities- Review, analyze, and update existing A&A Process SOPs to reflect current Government-approved practices.
- Review and update, where and when needed, the existing certification/testing model so it reflects best business practices in information technology/security once approved by the Government.
- Review current processes and recommend/develop automated processes in the areas of application risk assessments and additionally update/map these processes to existing interactive workflows and processes in SharePoint.
- Function as the primary Point of Contact with responsibility for the development and maintenance of the cybersecurity SOPs.
- Provide subject matter expertise in the area of DoD and DHA A&A requirements.
- Ensure accuracy of the information introduced in the SOPs and institute and exercise proper change control mechanisms when proposing or making changes to the technical, functional, or contextual information contained in the SOPs.
- Ensure the accuracy and correctness of the procedures and processes in the SOPs by utilizing a thorough Quality Assurance (QA) plan.
- Maintain all RMF/DIACAP documentation templates associated with A&A efforts and associated deliverables.
- Create, maintain, and manage training materials for approval by the Government.
- Apprise users about available…
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).