Information Systems Security Officer

RMF Implementation & Authorization Support:

• Support RMF lifecycle activities in accordance with DoDI 8510.01.
• Assist with system categorization and control selection (NIST SP 800-53).
• Develop and maintain RMF artifacts including: System Security Plan (SSP), Plan of Action & Milestones (POA&M), Security Control Traceability Matrix (SCTM), Security CONOPS (SECONOPS), Incident Response Plan (IRP).

Security Control Implementation & Validation:

• Document implementation of security controls.
• Validate control inheritance from Government Furnished Equipment (GFE).
• Ensure alignment between system architecture and cybersecurity requirements.

eMASS & Compliance Management:

• Maintain the system Body of Evidence within eMASS.
• Track control implementation status and associated artifacts.
• Ensure all documentation is complete, current, and audit-ready.