Cgrc Jobs in Alabama (NOW HIRING)

Job Summary:
Chenega MIOS is a company that supports large-scale government operations through advanced technology. They are seeking an RMF Analyst III to conduct mid-level RMF analysis and manage cybersecurity tasks for the Army Materiel Command, ensuring compliance with security standards and overseeing the cybersecurity lifecycle.
Responsibilities:
• Assist Senior RMF practitioner managing ATO packages, continuous monitoring plans, and eMASS documentation.
• Deep understanding of cybersecurity frameworks, documentation, and technical validation processes, working closely with stakeholders and control assessors to ensure security and compliance.
• Provide weekly reporting to the senior task lead.
• Assist in the optimization of the current process to streamline the approval process with the Program Information Security System Manager (P-ISSM) prior to submissions to the Authorizing Official (AO).
• Track timely and high-quality completion of process tasks and milestones, and report on the status of key milestones to the senior task lead.
• Assist with overseeing the cybersecurity lifecycle from inception to completion.
• Develop, review, and update documentation to ensure compliance with RMF and Continuous Monitoring requirements.
• Evaluate and validate technical processes related to ATO (Authority to Operate) requirements, ensuring alignment with cybersecurity standards.
• Assisting in the preparation and review of authorization information and documentation for RMF and Continuous Monitoring.
• Assist with eMASS package completion and maintenance, including artifacts, self-assessments, and asset management.
• Review project schedules, requirements, and risk assessments, offering recommendations to program stakeholders to enhance security posture.
• Develop security plans, as well as assessment reports, plans of action, and milestones for remediation. Defines criticality or sensitivity of systems, performs categorization calculations, and recommends corrective action.
• Recommend baseline security controls, assess changes in controls, and coordinate changes to security authorizations.
• Conduct evaluations to verify that design and implementation meet requirements.
• Confirm that all necessary supporting documents (e.g., Incident Response Plan, Configuration Management Plan, Contingency Plan) are present, complete, and have been reviewed and approved.
• Confirm that every finding is identified and tracked in the POA&M. Ensure each POA&M item has a realistic mitigation strategy, defined resources, and a scheduled completion date.
• Prepare test plans and conduct security control testing IAW with NIST SP800-53, DoDI 8510.01, NIST SP 800-37 Rev. 2
• Supervisory duties as assigned.
• Other duties as assigned.
Qualifications:
Required:
• A bachelor's degree in science, Technology, Engineering, Mathematics, IT, or business-related programs is required.
• 5+ years of experience in Cybersecurity compliance/Risk Management Framework.
• 5+ years of experience with RMF (NIST SP800-53, NIST SP 800-37 DoDI 8510.01), ATO packages, POA&M development, and system categorization is required.
• Baseline and Full Computing Environment Certifications for IAT-II IAW DoD 8570.01-M (Security+ certification) required.
• Experience with eMASS is required.
• Must have an active Secret clearance with the ability to obtain TS with SCI eligibility.
Preferred:
• Cybersecurity certifications like CISSP (Certified Information Systems Security Professional), CISA (Certified Information Systems Auditor), CISM (Certified Information Security Manager), or CGRC (Certified in Governance, Risk and Compliance) are preferred.
Company:
Chenega MIOS (Military, Intelligence, and Operations Support) brings together a family of high‑performing companies united by a common purpose: supporting the most critical missions of the federal government, the Department of Defense, and the Intelligence Community. Founded in 2010, the company is headquartered in Lorton, VA, US, , with a team of 1001-5000 employees. The company is currently Late Stage.