Logo-of-Aermor-Llc-hiring-for-jobs-in-UK-on-GrabJobs

Risk Management Framework Specialist

icon building Company : Aermor Llc
icon briefcase Job Type : Full Time

Number of Applicants

 : 

000+

Click to reveal the number of candidates who applied for this job.
icon loader
icon loader

Let AI Supercharge Your Job Hunt!

JobCopilot scans 500,000+ company career sites daily to find jobs for you

Never miss an opportunity Save hours by auto-filling applications forms Land more interviews with tailored applications
happy man
thunder iconActivate JobCopilot

Job Description - Risk Management Framework Specialist

Location: Suffolk 
Position Type: Full Time
Clearance: TS/SCI


AERMOR is hiring a Risk Management Framework Specialist to join the team in Suffolk, VA. This position will provide project management, detailed subject matter expertise, and expert guidance to government personnel in the execution of Cyber Red Team Cybersecurity. Managing cybersecurity, certification and accreditation and configuration change boards of the NRT networks. 



Responsibilities:
 
  • Creates, reviews, updates, and validate Cybersecurity Standard Operations Procedures (SOPs) as required.
  • Reviews and maintains an inventory of authorized software (software custodian)
  • Reviews and maintains an inventory of devices and media
  • Audits and validates configurations deployed on laptops, workstations, and servers
  • Audits and validates configurations of network devices based on DISA STIGs, or defining and implementing compensating controls of such STIGs as required to ensure mission execution.
  • Maintain and update all Risk Management Framework (RMF) and C&A documentation to ensure the relevancy and currency of Navy Red Team assets to include required revisions and updates in eMass.
  • Conduct comprehensive annual RMF package reviews to ensure continued compliance of the Navy Red Team tool suite and/or Networks.
  • Ensure traceability is maintained throughout the RMF submission process (e.g.: C&A Plan, POAM, RAR, Topology, Software, Ports Protocols and Services, Test Plan).
  • Maintain network and system documentation in DITPR-DON / DADMS.
  • Maintain documentation and registration of Network Ports, Protocols, and Services.
  • Maintain circuit registrations in Global Interconnection Approval Process System (GIAP) and Systems/Network Approval Process (SNAP).
  • Maintain and report on the status of all outstanding C&A items and supporting documentation.
  • As a member of the Configuration Control Board (CCB), ensures CCB approved changes are timely and accurately reflected in the C&A documentation.
  • Support compliance validation of current and future directives (e.g.: IAVs, STIGs, CTOs).
  • Provide recommendations for corrective action of any non-compliant security controls.
  • Execute DISA STIG validations for systems in conjunction with C&A package reviews annually.
  • Provide security expertise to ensure security controls are implemented and the resulting documentation and artifacts are current.
  • Prepare reports on scanning results and configuration management observations monthly.
  • Document assessment activities and results in sufficient detail to enable external review of all assessment processes, activities, results, and conclusions.
  • Conduct and document a semi-annual table-top exercise (two times) each calendar year.
  • Produce test plans, draft after actions and other documents for review and comment.
  • Review and/or revise Business Impact Analysis (BIA) to include business process, IT dependency, and physical security assessments annually.
  • Review and analyze IT contingency / disaster recovery plans for NIST and DoN Compliance and produce checklists for IT systems.
  • Assist with exercise and/or training and documentation of IT contingency plan and execution.

QUALIFICATIONS REQUIRED:
 
  • Certified Information Systems Security Professional (CISSP) certification.
  • 1-3 years of experience with Assured Compliance Assessment System (ACAS) and/or Nessus.
  • 5-10 years Certification and Accreditation (C&A) package assembly experience
  • Risk Management Framework (RMF) training and certification is desired

 
Original job Risk Management Framework Specialist posted on GrabJobs ©. To flag any issues with this job please use the Report Job button on GrabJobs.
Share Job
Share Job

Auto-Apply to Risk Management Framework Specialist Jobs with your AI JobCopilot

thunder icon Auto-Apply with AI

Similar Risk Management Framework Specialist Jobs in the UK

GrabJobs is the no1 job portal in the UK, connecting you to thousands of jobs fast! Find the best jobs in the UK, apply in 1 click and get a job today!

Mobile Apps

Copyright © 2026 Grabjobs Pte.Ltd. All Rights Reserved.