NIST Risk Management Framework SME

Boston Government Services, LLC (BGS); United States; On-site; USD 90,000 - 120,000; Full time

Benefits offered by this job

Health Insurance

Dental Insurance

Vision Insurance

Paid Vacation

401K

Long and Short-Term Disability

Job summary

A governmental services provider is seeking a cybersecurity compliance lead for a remote work arrangement with onsite travel requirements. The candidate will oversee RMF activities for federal systems, ensuring adherence to NIST SP 800-53, developing security plans and conducting assessments. A bachelor’s degree in a related field and a minimum of 5 years in cybersecurity compliance, with necessary certifications like CISSP or CISM, are required. Benefits include health insurance and a competitive pay package.

Qualifications

• Minimum 5 years of experience in cybersecurity compliance, with at least 3 years focused on RMF and NIST SP 800-53.
• Demonstrated experience developing SSPs, POA&Ms, and conducting security assessments.
• Professional certifications such as CISSP, CISM, CISA, or equivalent are required.

Responsibilities

• Lead RMF activities for federal systems ensuring compliance with NIST SP 800-53.
• Develop and maintain System Security Plans (SSPs) and Security Assessment Reports (SARs).
• Conduct gap analyses and recommend remediation strategies.

Skills

Cybersecurity compliance

NIST SP 800-53

Risk assessments

Technical writing

Communication skills

Education

Bachelor’s degree in Cybersecurity, Information Systems, or related field

Tools

NIST SP 800 series

FISMA

Job description

Responsibilities

• Lead RMF activities for federal systems, ensuring compliance with NIST SP 800-53 and related standards.
• Develop and maintain System Security Plans (SSPs), Security Assessment Reports (SARs), and Plans of Action & Milestones (POA&Ms).
• Conduct gap analyses and risk assessments to identify compliance deficiencies and recommend remediation strategies.
• Provide expert guidance on security control implementation and documentation for Authorization to Operate (ATO) packages.
• Support security audits and assessments, including preparation for FISMA and FedRAMP requirements.
• Deliver training and workshops on RMF processes and NIST SP 800-53 controls.
• Collaborate with system owners, ISSOs, and other stakeholders to ensure continuous monitoring and risk mitigation.

Requirements

• Bachelor’s degree in Cybersecurity, Information Systems, or related field (or equivalent experience).
• Minimum 5 years of experience in cybersecurity compliance, with at least 3 years focused on RMF and NIST SP 800-53.
• Demonstrated experience developing SSPs, POA&Ms, and conducting security assessments.
• Strong understanding of NIST SP 800 series (800-53, 800-37, 800-171) and FISMA requirements.
• Professional certifications such as CISSP, CISM, CISA, or equivalent are required.
• Excellent technical writing and communication skills for compliance documentation.

Preferred Qualifications

• ISSEP (formerly CISSP-ISSEP) certification.
• Experience with cloud security and FedRAMP controls.
• Ability to lead compliance workshops and mentor junior staff.

Location/Work Arrangement

This position is a Remote Work Arrangement with some travel/onsite requirements.

Benefits

BGS offers a competitive total compensation package to eligible employees. Benefits include Health, Dental, Vision, Life Insurance, Paid Vacation, 401K, Long and Short-Term Disability.

Eeo

BGS is an Equal Opportunity/Affirmative Action employer. All qualified applicants are encouraged to apply and will receive consideration for employment without regard to race, color, religion, sex, national origin, disability, or protected veteran status.