Cybersecurity and Risk Management Framework Specialist, Mid

Phase2 Technology; Waipahu (HI); On-site; USD 110,000 - 160,000; Full time

Job summary

Phase2 Technology is seeking a Cybersecurity and Risk Management Framework Specialist, Mid, to lead RMF activities and strengthen DoW information system security. The role involves guiding senior leaders and coordinating across governance, compliance, and threat initiatives.

Applicants should have 2+ years of cybersecurity experience and TS/SCI clearance. The position emphasizes analytical risk management, documentation, and collaboration with proposal teams to develop cybersecurity roadmaps and

Qualifications

• 2+ years of experience with IT operations or cybersecurity.
• Experience in a cybersecurity compliance, operations, or engineering leadership role.
• Experience supporting cybersecurity compliance, audits, or inspections.
• Ability to work with and guide senior leaders, including CISO, CIO, and CTO, and executives to ideate, build, and execute cybersecurity capability maturation.
• Ability to collaborate with project and proposal teams to incorporate cybersecurity solutions and develop high quality implementation plans and roadmaps.
• Ability to author technical documentation, whitepapers, and blogs on leading cybersecurity topics and concepts.
• TS/SCI clearance
• HS diploma or GED
• Information Security Certification such as CEH, CISM, CCSP, CCSK, CISSP, or CompTIA Security+ Certification

Responsibilities

• Develop cybersecurity strategies and manage RMF processes.
• Ensure regulatory compliance and risk mitigation for DoW information systems.
• Support enterprise cybersecurity governance, risk management, compliance, and innovation activities.
• Mentor and supervise team members and guide senior leaders to mature cybersecurity capabilities.
• Collaborate across governance, RMF operations, compliance monitoring, and threat initiatives.

Skills

IT operations

Cybersecurity

Leadership

RMF process

Regulatory compliance

Technical documentation

Stakeholder communication

Education

HS diploma or GED

Bachelor's degree

Tools

eMASS

NIST SP 800-53

DoD 8500/8510

AWS/Azure/GCP

Job description

Cybersecurity and Risk Management Framework Specialist, Mid

The Opportunity

Manage the application of analytical risk management principles that enable organizations to achieve mission assurance by preparing for, preventing, mitigating, responding to, and recovering from emergencies. Apply advanced skills, extensive technical expertise, and full industry knowledge. Develop innovative solutions to complex problems. Work without considerable direction. Mentor and supervise team members. Support enterprise cybersecurity governance, risk management, compliance, and innovation activities for Department of War (DoW) information systems and networks. Assume responsibility for developing cybersecurity strategies, managing the Risk Management Framework (RMF) process, ensuring regulatory compliance, and supporting mission partners with cybersecurity risk mitigation and emerging threat awareness. Work across multiple cybersecurity functions, including governance, RMF operations, compliance monitoring, and cyber threat innovation initiatives.

You Have

• 2+ years of experience with IT operations or cybersecurity
• Experience in a cybersecurity compliance, operations, or engineering leadership role
• Experience supporting cybersecurity compliance, audits, or inspections
• Ability to work with and guide senior leaders, including CISO, CIO, and CTO, and executives to ideate, build, and execute cybersecurity capability maturation
• Ability to collaborate with project and proposal teams to incorporate cybersecurity solutions and develop high quality implementation plans and roadmaps
• Ability to author technical documentation, whitepapers, and blogs on leading cybersecurity topics and concepts
• TS/SCI clearance
• HS diploma or GED
• Information Security Certification such as CEH, CISM, CCSP, CCSK, CISSP, or CompTIA Security+ Certification

Nice If You Have

• Experience working on defense or national security-related issues in the Indo‑Pacific region
• Experience working at a DoW Command‑level Headquarters
• Experience with NIST 800‑53 and DoD 8500 or 8510
• Experience selecting, designing, and implementing security tools and capabilities for large, complex federal or commercial organizations
• Experience with Amazon Web Services (AWS), Azure, or Google Cloud Platform (GCP)
• Knowledge of the Enterprise Mission Assurance Support Service (eMASS) and Mission Partner Engagement (MPE)
• Knowledge of innovative cybersecurity capabilities, including AI and machine learning, Next‑Generation Firewall (NGFW), and Big Data
• Ability to support the development of cybersecurity policies or governance frameworks
• Possession of excellent verbal and written communication skills
• Bachelor's degree

Clearance

Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information; TS/SCI clearance is required.

Commitment to Non‑Discrimination

All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, local, or international law.