Risk Management Framework; RMF Analyst; Remote

Future Need - Actively Interviewing

The following states/districts are excluded from this job ad: AK, CA, CO, CT, DC, HI, LA, MA, MN, MO, NE, NV, NH, NJ, NM, NY, ND, OR, PR, RI, VT, WA, WY.

Location:

Remote in any United States jurisdiction not excluded from this job advertisement.

Sustain the authorization lifecycle of a mission‑critical Department of Veterans Affairs (VA) cloud platform. The RMF Analyst supports all six steps of the National Institute of Standards and Technology (NIST) Risk Management Framework (RMF) process and develops, updates, and maintains required RMF documentation for hosted applications.

5 years of experience supporting NIST RMF processes.

Bachelor's Degree in cybersecurity, information assurance, or related field;
CompTIA Security+ (preferred).

• Excellent knowledge of all six steps of the NIST RMF process (categorize, select, implement, assess, authorize, monitor).
• Excellent ability to develop, update, and maintain required RMF documentation (e.g., Disaster Recovery Plan documentation).
• Excellent experience performing continuous monitoring activities.
• Excellent ability to implement and maintain required NIST security controls.
• Excellent experience preparing and submitting required artifacts for Authorization to Operate (ATO) packages and reauthorization efforts.
• Above average ability to coordinate with security personnel and third‑party assessors during authorization reviews.
• Above average experience supporting change documentation and impact analysis.
• Experience supporting a federal agency.
• Excellent verbal and written communication skills.

• Assignment Location – Remote.
• Sedentary work with occasional light lifting up to 10 pounds.
• Typing, communicating, repetitive motions.
• Close visual acuity to prepare and analyze data, view computer monitors and read; may need to view presentation screens and other visual aids in a virtual setting.
• Indoor environmental conditions with protection from outside elements.

Active Federal Civilian Public Trust clearance required.

• Supports all six steps of the NIST RMF process.
• Develops, updates, and maintains required RMF documentation including Disaster Recovery Plan documentation that is complete, current, and aligned with system architecture and operational practices.
• Ensures continuous monitoring activities are performed in accordance with VA Office of Information and Technology (OI&T) policies.
• Maintains recorded platform security posture and associated controls in Continuous Authorization Monitoring (CAM) or equivalent systems.
• Implements and maintains required NIST security controls in accordance with the approved baseline.
• Supports conversions to new NIST versions as standing policies are superseded.
• Validates security control effectiveness through automated testing, configuration validation, and periodic assessments.
• Prepares and submits required artifacts for ATO packages and reauthorization efforts for all products and services hosted or supported by the application.
• Coordinates with security personnel and third‑party assessors during authorization reviews.
• Addresses assessment findings and provides remediation plans within defined timelines.
• Supports change documentation and impact analysis for architectural or operational modifications.
• Maintains Plan of Action and Milestones (POA&M) accuracy and supports timely closure of findings.
• Contributes RMF lifecycle status, security control implementation progress, and continuous monitoring data to the monthly RMF, security, and ATO status report.

The annual projected pay range for this position is $72,517 - $111,100 with consideration for factors including qualifications, experience, job responsibilities, and geographical location.

Oxley Enterprises, Inc. offers a full array of benefits including:

• Medical, dental, vision, and prescription drug coverage for you and your family.
• Life insurance, short‑term disability and long‑term disability paid for by the Company.
• Supplemental coverages including Accident, Critical Illness, and Hospital.
• Additional life insurance coverage for you and your dependents.
• 401(k) plan with various options to select based on your retirement goals.

All qualified applicants will receive consideration for employment without regard to any status protected by applicable federal, state, or local law.