• Lead and support all phases of the Risk Management Framework (RMF) process in accordance with NIST SP 800-37, NIST SP 800-53 Security and Privacy Controls and related standards.
• Develop, maintain, and update RMF documentation including:
• System Security Plans (SSPs)
• Security Assessment Reports (SARs)
• Plans of Action and Milestones (POA&Ms)
• Coordinate security authorization packages for ATO decisions.
• Collaboration & Stakeholder Engagement
• Work closely with system engineers, network administrators, program managers, and security leadership.
• Participate in security working groups, technical reviews, and compliance audits.
• Communicate security posture and risk status to technical and non-technical stakeholders.

• Risk Management Framework (RMF) lifecycle experience: all or most phases, including POA&M and continuous monitoring.
• ATO Process expertise: system support authorization, reauthorization and continuous compliance.
• Security control implementation based on NIST SP 800-53
• Experience with using ServiceNOW

• Bachelor’s in computer science, Cybersecurity, or information technology, or a related field
• At least 3-5 years of experience
• Active TS/SCI with a current CI Polygraph
• BS in Computer Science, Cyber Security, or related field.
• Demonstrated hands-on experience executing the RMF lifecycle (all or most phases).
• Familiarity with federal cybersecurity compliance environments
• One of more of the following active security certifications such as:
• CompTIA Security ,
• CISSP (Certified Information Systems Security Professional),
• CISM (Certified Information Security Manager),
• CIAM (Certified Identity and Access Manager).

• Ability to operate independently and contribute immediately upon assignment.
• Self-motivated and eager to work intently to satisfy mission requirements
• Adaptable and has the desire to maintain our company culture
• Strong communication and coordination skills with technical and non-technical stakeholders
• Experience in security working groups, technical reviews, and compliance audits
• Ability to multitask and adjust priorities as needed

Altamira is an Equal Opportunity/Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or protected veteran status. We focus on recruiting talented, self-motivated employees that find a way to get things done. Join our team of experts as we engineer national security!

Lead and support all phases of the Risk Management Framework (RMF) process in accordance with NIST SP 800-37, NIST SP 800-53 Security and Privacy Controls and related standards. Develop, maintain, and update RMF documentation including:System Security Plans (SS - Ps)Security Assessment Reports (SARs)Plans of Action and Milestones (POA&Ms)Coordinate security authorization packages for ATO decisions. Collaboration & Stakeholder Engagement. Work closely with system engineers, network administrators, program managers, and security leadership. Participate in security working groups, technical reviews, and compliance audits. Communicate security posture and risk status to technical and non-technical stakeholders. Knowledge Base: Risk Management Framework (RMF) lifecycle experience: all or most phases, including POA&M and continuous monitoring. ATO Process expertise: system support authorization, reauthorization and continuous compliance. Security control implementation based on NIST SP 800-53 Experience with using Service. NOW - Education and Experience:Bachelor’s in computer science, Cybersecurity, or information technology, or a related field. At least 3-5 years of experience. Active TS/ SCI with a current CI Polygraph. BS in Computer Science, Cyber Security, or related field. Demonstrated hands-on experience executing the RMF lifecycle (all or most phases). Familiarity with federal cybersecurity compliance environments. One of more of the following active security certifications such as:Comp. TIA Security ,CISSP (Certified Information Systems Security Professional),CISM (Certified Information Security Manager),CIAM (Certified Identity and Access Manager). Abilities and Competencies:Ability to operate independently and contribute immediately upon assignment. Self-motivated and eager to work intently to satisfy mission requirements. Adaptable and has the desire to maintain our company culture. Strong communication and coordination skills with technical and non-technical stakeholders. Experience in security working groups, technical reviews, and compliance audits. Ability to multitask and adjust priorities as needed. Nice to have: Familiarity with current Information Assurance (IA) and cybersecurity tools such as vulnerability management and scanning tools. Experience with assessing security requirements and evaluating systems for gaps in security requirements.

search terms: Management+Framework