Pay Growth
?
out of 5
Not enough data
Not enough info to score pay or growth
Risk Management Framework SME
Job
Govcio LLC
Langley Air Force Base, VA (In Person)
$140,000 Salary, Full-Time
Review key factors to help you decide if the role fits your goals.
Job Security
?
out of 5
Not enough data
Calculating job security score...
Total Score
97
out of 100
Average of individual scores
Skill Insights
Compare your current skills to what this opportunity needs—we'll show you what you already have and what could strengthen your application.
Job Description
GovCIO is currently hiring for a Risk Management Framework SME to support modernization effort. This position will be located in Hampton, VA on Joint Base Langley-Eustis and will be a fully onsite position. Responsibilities We are seeking a highly skilled Risk Management Framework (RMF) Subject Matter Expert (SME) with a strong information system security manager (ISSM) background and hands-on experience with XACTA. You will guide system owners, engineering, teams and leadership through the full RMF lifecycle- ensuring compliance, managing documentation, and supporting secure system operations across classified and unclassified environments. This position is located at Langley Air Force Base, Hampton, Virginia. Key Responsibilities Lead and manage the full DOD RMF process for assigned systems Provide ISSM-level oversight and guidance to ensure compliance with DOD, NIST and agency-specific security policies Develop, maintain, and validate RMF documentation including System Security Plans, Security controls traceability matrices, POA&M, and systems categorization artifacts Utilize XACTA for control implementation, evidence upload, package creation, workflow, management, and assessment preparation Work closely with engineers, administrators, developers, and mission stakeholders to ensure secure design and architecture decisions Lead assessment preparation activities and support independent audits, CCRI reviews, and Authorizing Official (AO) evaluations Conduct vulnerability analysis, risk assessment and remediation planning Guide continuous monitoring activities: STIG compliance, vulnerability scanning, patch management review, and incident documentation Serve as a subject matter expert for cybersecurity policy interpretation, control inheritance, and risk acceptance recommendations Provide training, mentoring and support to security analysts and program team members Qualifications High School with 9+ years (or commensurate experience)