Hybrid Cyber Risk & RMF Compliance Lead

Financeroles; Newport (RI); Hybrid; USD 62,000 - 141,000; Full time

Job summary

Booz Allen Hamilton in the United States is seeking a Cybersecurity Compliance and Risk Manager. This hybrid role blends hands-on security with programmatic risk management to safeguard client infrastructures.

You will lead RMF execution, implement NIST SP 800-53 controls, and maintain continuous monitoring to provide risk visibility across systems. Secret clearance and HS diploma are required, with DoD 8140 certifications valued.

Qualifications

• 3+ years of DoD RMF experience
• 3+ years of vulnerability assessment, remediation, and mitigation
• 1+ years with DoW STIGs and SRGs
• Experience implementing, documenting, assessing, and monitoring NIST SP 800-53 controls
• Secret clearance
• HS diploma or GED
• DoD 8140 Certification such as Security+ CE, CISM, CISSP, or SecurityX

Responsibilities

• Lead RMF execution, including security control attribution, documentation, assessment, and authorization.
• Implement and validate NIST SP 800-53 security controls across enterprise systems.
• Maintain continuous monitoring activities for system compliance and risk visibility.
• Perform vulnerability assessments and risk analysis using DoW tools such as ACAS, VRAM, and eMASS.
• Apply and verify DoW STIGs and SRGs across software, database, and network environments.
• Manage enterprise POA&Ms to track and remediate security findings.
• Collaborate with clients and SMEs to develop mitigation strategies and clearly communicate technical risks.
• Provide guidance and mentorship to cybersecurity team members.

Skills

RMF execution

NIST SP 800-53

Vulnerability assessment

DoD RMF

Mentorship

Client communication

Education

HS diploma or GED

Tools

ACAS

eMASS

VRAM

Xacta

ServiceNow

ESS

Job description

Booz Allen Hamilton in the United States is seeking a Cybersecurity Compliance and Risk Manager. This hybrid role blends hands-on security with programmatic risk management to safeguard client infrastructures.

You will lead RMF execution, implement NIST SP 800-53 controls, and maintain continuous monitoring to provide risk visibility across systems. Secret clearance and HS diploma are required, with DoD 8140 certifications valued.