ISSO​/RMF Analyst

Empower AI is AI for government. Empower AI gives federal agency leaders the tools to elevate the potential of their workforce with a direct path for meaningful transformation. Headquartered in Reston, Va., Empower AI leverages three decades of experience solving complex challenges in Health, Defense, and Civilian missions. Our proven Empower AI Platform® provides a practical, sustainable path for clients to achieve transformation that is true to who they are, what they do, how they work, with the resources they have.

The result is a government workforce that is exponentially more creative and productive. For more information, visit www.

Empower.ai.

Empower AI is proud to be recognized as a 2024 Military Friendly Employer by Viqtory, the publisher of G.I. Jobs. This designation reflects the company’s commitment to hiring and supporting active-duty and veteran employees.

This position will support our newly awarded DCSA contract.

Empower AI is seeking an ISSO / RMF Analyst to support Risk Management Framework (RMF) activities for the systems and assets managed by an enterprise IT Customer Support Services program supporting a Department of War agency. Acting on behalf of the Government System Owner, the ISSO develops and maintains complete, accurate, and timely RMF documentation packages in eMASS, executes continuous monitoring, manages Plans of Action and Milestones, and keeps in-scope systems (endpoint infrastructure, printers, communications, dashboards, and support platforms) reaccredited before their ATO expiration.

The role works daily with systems administrators, engineers, and the Risk Management Support Lead to translate technical configurations into compliant security controls and audit-ready evidence. This is a salaried, FLSA-exempt position in which you will independently analyze situations, determine the appropriate course of action, and exercise discretion and independent judgment on matters of significance to the program and its customers.

THIS IS AN ONSITE ROLE IN QUANTICO, VA (RKB) WITH UP TO 10% OF TRAVEL INVOLVED.

JOB DUTIES:

• Develop, compile, update, and maintain RMF package artifacts for assigned systems in eMASS, including the System Security Plan (SSP), Security Assessment Report (SAR) inputs, Plan of Action & Milestones (POA&M), control implementation statements, and supporting artifacts required by DoDI 8510.01 and agency A&A process documentation.

• Execute the continuous monitoring strategy for assigned systems: analyze weekly ACAS vulnerability scan results, track STIG compliance, validate remediation, and manage POA&M items to maintain security posture between authorization cycles.

• Prepare the weekly Vulnerability Scan Analysis Report and the monthly STIG Compliance Report for assigned systems, identifying critical vulnerabilities and their remediation status.

• Work with systems administrators, telecommunications engineers, and endpoint engineers to select, implement, and document NIST SP 800-53 security controls, verify STIG/SRG baseline configurations, and collect implementation evidence.

• Track ATO expiration dates and drive reaccreditation activities so that every in-scope system is reauthorized prior to its 3-year ATO expiration and 100% of complete packages are delivered on the required timeline.

• Support security control assessments and audits: prepare systems and documentation, participate in technical exchange meetings with assessors, respond to findings, and maintain a state of continuous audit readiness.

• Review and process change requests for security impact (CM-4), support incident handling and reporting procedures, and ensure security requirements are addressed in Change Management for in-scope systems.

• Maintain RMF process…