Cybersecurity Risk & Compliance Manager (Hybrid/Remote)

Phase2 Technology; Middletown (RI); Hybrid; USD 62,000 - 141,000; Full time

Job summary

Booz Allen is seeking a Cybersecurity Compliance and Risk Manager to lead RMF execution, implement NIST 800-53 controls, and oversee continuous monitoring for client environments. The role blends technical cybersecurity with strategic risk management and mentoring of junior staff.

The position requires DoW/RMF experience, DoD 8140 certifications, a Secret clearance, and strong communication of risk to clients. Hybrid work is available in the Northeast region.

Qualifications

• 3+ years of experience with DoW or Navy cybersecurity and RMF.
• 3+ years of experience with cyber vulnerability assessment, remediation, and mitigation tools (ACAS, eMASS, VRAM).
• 1+ years of experience with DoW STIGs and SRGs.
• Experience implementing and monitoring NIST SP 800-53 controls and drafting remediation statements.
• Secret clearance.
• HS diploma or GED.
• DoW 8140 Certification such as Security+ CE, CISM, CISSP, or SecurityX.

Responsibilities

• Lead RMF execution, including control attribution, documentation, assessment, and authorization.
• Implement and validate NIST SP 800-53 security controls across enterprise systems.
• Maintain continuous monitoring for system compliance and risk visibility.
• Perform vulnerability assessments and risk analysis using DoW tools (ACAS, VRAM, eMASS).
• Apply STIGs and SRGs across software, database, and network environments.
• Manage enterprise POA&Ms to track and remediate findings.
• Collaborate with clients to develop mitigation strategies and communicate risks clearly.
• Provide guidance and mentorship to cybersecurity team members.

Skills

RMF execution

Vulnerability tools

DoD 8140 Certification

Client communication

Mentorship

Education

HS diploma or GED

Bachelor's degree in a technical field

Tools

Xacta

ESS

Altiris

ServiceNow

Job description

Booz Allen is seeking a Cybersecurity Compliance and Risk Manager to lead RMF execution, implement NIST 800-53 controls, and oversee continuous monitoring for client environments. The role blends technical cybersecurity with strategic risk management and mentoring of junior staff.

The position requires DoW/RMF experience, DoD 8140 certifications, a Secret clearance, and strong communication of risk to clients. Hybrid work is available in the Northeast region.