1

Rmf Jobs in Tennessee (NOW HIRING)

As the RMF Analyst II you will directly liaison with the government customer to manage the review, audit, and authorization of Risk Management Framework (RMF) assessment and authorization (A&A)/ATO ...

RMF Analyst II

Oak Ridge, TN · On-site +1

$70K - $100K/yr

As the RMF Analyst II you will directly liaison with the government customer to manage the review, audit, and authorization of Risk Management Framework (RMF) assessment and authorization (A&A)/ATO ...

RMF Analyst II

Oak Ridge, TN · On-site

$70K - $100K/yr

As the RMF Analyst II you will directly liaison with the government customer to manage the review, audit, and authorization of Risk Management Framework (RMF) assessment and authorization (A&A)/ATO ...

Qualifications: ● Minimum 1-3 years' experience in IT consulting specializing in Governance, Risk, and Compliance using the RMF. ● CISSP, CISM, or CAP certification is preferred but not required ...

next page

Showing results 1-20

Rmf information

See Tennessee salary details

$35.4K

$88.2K

$152.5K

How much do rmf jobs pay per year?

As of Aug 9, 2026, the average yearly pay for rmf in Tennessee is $88,150.00, according to ZipRecruiter salary data. Most workers in this role earn between $63,100.00 and $107,100.00 per year, depending on experience, location, and employer.

What are the primary responsibilities of an RMF specialist on a daily basis?

An RMF specialist typically oversees the implementation and documentation of security controls for information systems, ensuring continuous compliance with government and organizational regulations. Daily tasks may include conducting risk assessments, preparing security authorization documentation, communicating with stakeholders about security requirements, and staying updated on regulatory changes. They also collaborate closely with IT, cybersecurity, and compliance teams to address vulnerabilities and support audits. This role requires regular monitoring and reporting to maintain a secure and compliant operational environment.

What is an RMF?

An RMF (Risk Management Framework) job involves implementing security measures and compliance processes to protect an organization's information systems. Professionals in this role assess risks, develop mitigation strategies, and ensure adherence to federal cybersecurity regulations, such as those outlined by NIST. They often work with government agencies, contractors, and businesses handling sensitive data. RMF specialists conduct security assessments, document controls, and support continuous monitoring efforts to maintain system integrity and compliance.

What are the key skills and qualifications needed to thrive in the RMF position, and why are they important?

To excel as a Risk Management Framework (RMF) specialist, a solid background in cybersecurity principles, risk assessment, and knowledge of federal compliance standards is essential, often supported by a degree in information security or a related field. Familiarity with tools like eMASS, NIST guidelines, and certifications such as CISSP or CAP is highly advantageous. Strong analytical thinking, attention to detail, and effective communication skills set outstanding RMF professionals apart in this role. These skills are vital to ensure secure system operations and maintain regulatory compliance in sensitive environments.

What does an RMF analyst do?

An RMF analyst is responsible for managing the Risk Management Framework process, which involves assessing, implementing, and monitoring security controls to protect information systems. They often work with cybersecurity tools, conduct risk assessments, and ensure compliance with security standards such as NIST SP 800-37. The role requires strong analytical skills and knowledge of security frameworks and regulations.
What are the most commonly searched types of Rmf jobs in Tennessee? The most popular types of Rmf jobs in Tennessee are:
What are popular job titles related to Rmf jobs in Tennessee? For Rmf jobs in Tennessee, the most frequently searched job titles are:
What cities in Tennessee are hiring for Rmf jobs? Cities in Tennessee with the most Rmf job openings:
Infographic showing various Rmf job openings in Tennessee as of August 2026, with employment types broken down into 88% Full Time, 7% Part Time, and 5% Contract. Highlights an 85% Physical, 5% Hybrid, and 10% Remote job distribution, with an average salary of $88,150 per year, or $42.4 per hour.

$70K - $100K/yr

Full-time

Medical, Retirement, PTO

Posted 12 days ago


Job description

Overview

Now Hiring at AMERICAN SYSTEMS

Epsilon, Inc. has joined AMERICAN SYSTEMS! As one organization, we offer expanded resources, streamlined operations, and increased opportunities for growth and development. 

Join us to be part of a dynamic, collaborative environment dedicated to innovation and customer success. 

Responsibilities

An Average Day: As the RMF Analyst II you will directly liaison with the government customer to manage the review, audit, and authorization of Risk Management Framework (RMF) assessment and authorization (A&A)/ATO Packages and for IT systems of varying size and complexity. In this role you will perform hands-on artifact review along with package management and review. Additionally, in this position you will:

  • Directly support the customer in the oversight of multiple system boundaries.
  • Make recommendations regarding the selection of cost-effective security controls to mitigate risk (e.g., protection of information, systems and processes).
  • Ensure consistent application of cybersecurity standards across multiple information systems.
  • Ensure all new cybersecurity projects meet or integrate cybersecurity standards into their development.
  • Author detailed security assessment reports and plans of action and milestones (POA&Ms), Risk Assessment Reports (RARs), and other artifacts associated with the RMF process.
  • Conduct in-depth analysis of complex systems and their interconnections through RMF.
  • Participate in high-level discussions about organizational risk management strategies.
  • Recommend improvements to RMF processes and tools to enhance efficiency and effectiveness.
  • Review and approve system security plans and other RMF documentation.
  • Make recommendations regarding the selection of cost-effective security controls to mitigate risk (e.g., protection of information, systems and processes).
Qualifications
  • As a requirement of this position, all candidates must be a U.S. Citizen. In accordance with 8 U.S.C. 1324b(a)(2)(C), Epsilon will not consider candidates for this position who do not meet the aforementioned conditions.
  • Must be able to attain and retain DoE L, or DoD Secret clearance.
  • Five (5) or more years of experience in the Cybersecurity field or combination of related education and experience.
  • Active Certified Information Systems Security Professional (CISSP) certification from ISC2.
  • Experience with assessment and authorization (A&A).
  • Experience with assessing and validating RMF, NIST, and other security controls.
  • RMF experience in package generation and assessment.
  • Visio diagram creation and modification.
  • RMF documentation creation and modification (SSP, CCB, COOP, etc.).
  • Familiarity with NIST 800-53 controls and applicable overlays.
  • Ability to provide security assessment reports that cover risks that the client should be aware of and mitigate risk with residual risks remaining.
  • Desired security certifications and qualifications: Security+ Ce, CySA+, SSCP, GSEC, GICSP, CND, CCNA Security, or equivalent.
  • Must be within a 2-hour commute of the customer location and will be required to travel onsite based on customer request.
Pay Transparency StatementAMERICAN SYSTEMS is committed to pay transparency for our applicants and employee-owners. The salary range for this position is USD $70,000.00/Yr. - USD $100,000/Yr. Actual compensation will be determined based on several factors permitted by law. AMERICAN SYSTEMS provides for the welfare of its employees and their dependents through a comprehensive benefits program by offering healthcare benefits, paid leave, retirement plans, insurance programs, and education and training assistance.EEO StatementEEO Race/Sex/Disability Status/Veteran StatusEmployment Type: FULL_TIME