Federal RMF Cyber Risk Consultant

PowerToFly; Arizona; Hybrid; USD 120,000 - 170,000; Full time

Job summary

Deloitte’s Cyber Strategy & Transformation team seeks a seasoned RMF professional to advise federal clients, develop and review ATO packages, and translate risk findings into clear executive briefings. Expect collaboration in a hybrid US delivery setting with cross-functional teams and ongoing opportunities to shape cyber governance and risk posture.

Requirements include a Bachelor's in a relevant field and 4+ years in cybersecurity, with RMF and NIST compliance experience.

Qualifications

• Bachelor's degree or equivalent combination of education and relevant cybersecurity experience.
• Minimum 4+ years in cybersecurity, information assurance, governance, risk and compliance, or federal security.
• At least 2 years supporting NIST RMF or equivalent authorization processes.
• Experience applying NIST RMF concepts and NIST SP 800-37 to information-system authorization.
• Experience implementing, documenting, or managing NIST SP 800-53 controls.

Responsibilities

• Advise Government & Public Services clients on RMF lifecycle to mitigate cyber risk.
• Lead development/review of ATO packages and security documentation.
• Develop cyber risk strategies aligned to frameworks and business needs.
• Synthesize findings into reports and executive briefings for varied audiences.
• Provide guidance and quality review to junior team members on RMF artifacts.
• Participate in proposal development and process improvements.

Skills

Independent work

Communication skills

Attention to detail

Relationship building

Project leadership

Task prioritization

Interpersonal skills

Meeting deadlines

Guidance to others

Education

Bachelor's degree in cybersecurity, information technology, information systems, computer science, risk management, business, mathematics, decision sciences, or related field

Job description

Deloitte’s Cyber Strategy & Transformation team seeks a seasoned RMF professional to advise federal clients, develop and review ATO packages, and translate risk findings into clear executive briefings. Expect collaboration in a hybrid US delivery setting with cross-functional teams and ongoing opportunities to shape cyber governance and risk posture.

Requirements include a Bachelor's in a relevant field and 4+ years in cybersecurity, with RMF and NIST compliance experience.