FedRAMP & RMF Cyber Risk Specialist

Steampunk; Bloomington (IL); On-site; USD 100,000 - 150,000; Full time

Job summary

Steampunk is seeking a Cyber Risk Management Specialist to lead RMF/A&A processes, FedRAMP compliance, and continuous monitoring across cloud environments. You will implement security controls, support audits, and align with NIST guidelines while guiding DevSecOps integration and risk treatment strategies.

The role requires strong knowledge of RMF, FedRAMP, and ATO processes, with experience in cloud architectures and federal compliance practices.

Qualifications

• Ability to obtain a U.S. government Security Clearance.
• Master's Degree and 6 year of cyber and FISMA experience; OR Bachelor's Degree and 8 years of cyber and FISMA experience; OR No degree and 12 years of experience, 10 of which must be in cyber and FISMA
• Possesses at least one professional certification: CISSP, CASP, CISA, CISM or GSLC

Responsibilities

• Integrate security into DevOps effectively at every stage of the software development life cycle (SDLC).
• Identify security holes and potential breaches, work through multifaceted security issues, and create effective solutions based on understanding of risk posture and treatments.
• Develop and implement tactical strategies for seamless automation to optimize the IT infrastructure.
• Apply specialized knowledge of financial audit standards, classified system IA requirements, and Privacy Act requirements.
• Implement the NIST SP 800 family of publications, particularly those associated with the RMF and FedRAMP requirements.

Job description

Steampunk is seeking a Cyber Risk Management Specialist to lead RMF/A&A processes, FedRAMP compliance, and continuous monitoring across cloud environments. You will implement security controls, support audits, and align with NIST guidelines while guiding DevSecOps integration and risk treatment strategies.

The role requires strong knowledge of RMF, FedRAMP, and ATO processes, with experience in cloud architectures and federal compliance practices.