Senior DoD Risk Management Framework SME

Resource Management Concepts, Inc.

. Develop, maintain, and expand enterprise-level Common Control Provider authorization packages within eMASS .

Posted 10/31/2026full-timeCharleston • South Carolina • United StatesSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in developing and managing enterprise-level security controls and risk management frameworks, particularly within federal environments. Proficient in utilizing eMASS for documentation and management of security packages while ensuring compliance with NIST standards.

Highest-signal resume keywords

NIST SP 800-37 Rev. 2 ImplementationNIST SP 800-53 ControlsEMASS Risk Package ManagementDoD 8140/8570 IAM Level II or III CertificationAWS GovCloud Security Management

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Risk Management Framework (RMF)Security Control AssessmentVulnerability ManagementAutomated Monitoring IntegrationTechnical Audit Coordination

Soft Skills

Advisory SkillsStakeholder Communication

Tools & Technologies

EMASSAWS GovCloudAzure Government

Certifications & Qualifications

CISSPCISMCAP/ISC2 CGRC

Industry Keywords

Common Control ProviderContinuous Authorization to OperateIntelligence Community ExperienceCSSP AlignmentCloud Landing Zone Security

Tech Stack

Tools & technologies

AWSAzureCloudCyber SecurityTypeScript

About the role

Key responsibilities & impact

Develop, maintain, and expand enterprise-level Common Control Provider authorization packages within eMASS
Guide tenant System Owners and Information System Security Officers on inheriting physical, operational, and technical controls
Audit and define physical and logical security boundaries between hosting infrastructure and tenant responsibilities
Coordinate with independent Security Control Assessors to schedule, facilitate, and clear technical audits of shared platforms
Create, execute, and monitor enterprise-wide Plans of Action and Milestones addressing vulnerabilities across multiple systems
Integrate automated monitoring capabilities to advance infrastructure toward Continuous Authorization to Operate
Serve as the primary authoritative liaison for inheritable enterprise security controls supporting a federal agency mission

Requirements

What you’ll need

Bachelor’s degree in Cybersecurity, Computer/Electrical/Electronics Engineering, or Mathematics with a computer science concentration, or equivalent
TS/SCI DoD clearance with the ability to obtain a CI polygraph
5+ years implementing NIST SP 800-37 Rev. 2 (RMF) and NIST SP 800-53 controls in federal or DoD environments
Proficiency documenting and managing risk packages in eMASS
DoD 8140/8570 IAM Level II or III certification requirements, such as CISSP, CISM, or CAP/ISC2 CGRC
Ability to commute to project sites in Charleston, SC, or the National Capital Region
Intelligence Community experience preferred
Master’s degree in a listed field or equivalent preferred
Experience managing security control allocation for AWS GovCloud, Azure Government, or federal multi-tenant data centers preferred
Strong advisory skills for explaining complex risk methodologies to GS-15 and SES stakeholders preferred
Familiarity with CSSP alignment and Cloud Landing Zone security preferred

Benefits

Comp & perks

Career growth investment, including training, certification, and education opportunities
Tuition assistance
Professional certifications
Competitive paid vacation package
11 paid federal holidays
High-quality, low-deductible healthcare plans
Pet insurance
Competitive 401(k) package
Flexible hybrid work schedule with telework eligibility on remaining days