Information System Security Officer-RMF Specialist
Role details
Job location
Tech stack
Job description
The Information System Security Officer / RMF Specialist supports client system owners and business stakeholders through the RMF lifecycle, including system authorization package development, security control documentation, evidence validation, continuous monitoring, POA&M tracking, and ongoing ATO maintenance.
- Develop, update, and maintain RMF authorization artifacts including SSPs, BIAs, FIPS 199 categorizations, PTAs/PIAs, CMPs, e-Authentication documentation, boundary memoranda, system architecture diagrams, and network diagrams.
- Assist system owners with control scoping, tailoring, overlay identification, inheritance mapping, and control evidence collection.
- Validate system-level evidence such as screenshots, logs, scan results, configuration records, and policy artifacts for accuracy and applicability.
- Support development of CPs, IRPs, ConMon Plans, CP/IRP test documentation, RMF templates, checklists, and user guides.
- Track POA&Ms, monitor remediation progress, and advise stakeholders on corrective actions to reduce authorization risk.
- Support FedRAMP package reviews and identify customer responsibilities for cloud systems.
- Maintain RMF content, process guides, SharePoint materials, office-hour content, and training materials.
Requirements
- Bachelor's degree or equivalent.
- Experience with RMF, A&A, FISMA, NIST 800-53 Rev. 5, SSP development, POA&M tracking, and security documentation.
- Ability to work directly with system owners, technical teams, ISSOs, privacy stakeholders, and compliance teams.
- Strong attention to detail and ability to produce high-quality authorization documentation.
- Familiarity with federal security tools, GRC systems, ticketing systems, artifact repositories, and evidence management.
- Must be a U.S. citizen.
- Successful drug screening.
- Must be eligible to obtain and maintain a security or clearance badge., * Security+, CISSP, CAP/CGRC, CISA, CISM, or equivalent RMF/security certification.
Benefits & conditions
- Schedule is full-time, Monday - Friday 40-hour week, 4/10's, or 9/80's and may require on call or overnight shifts depending on contract needs.
- This position may be fully onsite or hybrid/remote depending on the needs of the specific contract, BGS offers a competitive total compensation package to eligible employees. Benefits include Health, Dental, Vision, Life Insurance, Paid Vacation, 401K, Long and Short-Term Disability.
Starting compensation for this role typical salary ranges between $136,849 - $160,999 annually is commensurate with experience relative to the position and may vary based on candidate geographical location.
EEO: BGS is an Equal Opportunity/Affirmative Action employer. All qualified applicants are encouraged to apply and will receive consideration for employment without regard to race, color, religion, sex, national origin, disability, or protected veteran status.
Exclusive Agreement Disclaimer: BGS has standing contracts with federal agencies throughout the United States. We require an affirmative exclusive agreement to represent all candidates to our clients. By submitting this application, you are consenting to allow BGS to represent you as a candidate for the role in which you are applying.