We are seeking an experienced Risk Management Framework (RMF) Manager to join our team in support of Information System Support services for Air National Guard Readiness Center (ANGRC). The RMF Manager will oversee the establishment and maintenance of the RMF to ensure the security and integrity of information systems. This role involves strategic planning, risk assessment, and collaboration with various stakeholders to implement security controls and policies.

Key Responsibilities:

Lead the development, organization, implementation, and maintenance of the RMF, and ensure the RMF supports ANGRC personnel as a gateway to all Information Assurance support services.
Serve as a central point of contact for all RMF-related activities and communications and develop and maintain the RMF in accordance with applicable regulations and standards.
Develop and maintain an Operations Security (OPSEC) Plan in accordance with AFI 10-701, ensuring the protection of the government's critical information. Update and maintain the System Security Plans (SSP) IAW AFI-17-101.
Provide guidance on specific OPSEC measures required by the organization.
Conduct risk assessments to identify vulnerabilities and propose mitigation strategies and collaborate with IT and security teams to implement and manage security controls and policies.
Manage and coordinate RMF activities, ensuring compliance with established Acceptable Quality Levels (AQLs) as per the Performance Requirements Summary (PRS).
Monitor and report on the effectiveness of the RMF, making recommendations for improvement.
Provide monthly reports and updates outlining 8570 IAM level compliance at the ANGRC level.
Provide monthly the progress of all changes supporting IA and RMF control requirements originating from sources such as DOD directives and Air Force Instructions
Support the government in generating local policy and procedures required by the RMF control families.
Leverage Technical Surveillance Counter Measures (TSCM) techniques and measures to detect, neutralize, and/or exploit a wide variety of hostile and foreign penetration technologies used to obtain unauthorized access to classified and sensitive information.
Provide directorate level lecture training quarterly to outline requirements and the association to positional descriptions.
Conduct regular reviews and quality assurance checks to ensure that the project meets the desired level of quality.

Requirements

Extensive experience in risk management and information assurance.
Bachelor's degree in Information Technology, Cybersecurity, or a related field.
Professional certifications such as CISSP, CISM, or equivalent.
Demonstrated ability to develop and manage RMF in a government or military environment.
Proficiency in creating and executing OPSEC Plans in accordance with AFI 10-701.
At least 7 years of relevant work experience. Must have experience in Information Assurance and Risk Management Framework (RMF) field of operations and understand Air Force networks.
Excellent communications (both written and spoken) including customer support.
A high level of security clearance is required for this position. An active Secret security clearance is required.

Potomac Haven

New Jobs

Risk Management Framework Manager