RMF Cyber Risk & Accreditation Specialist

Booz Allen Hamilton; Northern (KY); Hybrid; USD 99,000 - 225,000; Full time

Benefits offered by this job

Health benefits

Paid time off

Tuition assistance

Job summary

Booz Allen Hamilton looks for an information security risk specialist to help DoD clients assess cyber risk, review RMF packages, and guide authorities to actionable plans. You will translate complex security concepts into practical recommendations and support accreditation through eMASS, policies, and control documentation.

Ideal candidates bring 5+ years of RMF experience, knowledge of NIST 5 controls, and hands-on ACAS/STIG evaluations, with strong communication and a security-focused mindset.

Qualifications

• 5+ years of experience supporting DoD RMF accreditation efforts for enterprise IT systems.
• Experience managing RMF accreditation packages from initial accreditation to ATO maintenance.
• Experience reviewing and assessing compliance with NIST Revision 5 security controls.
• Experience evaluating system security reports from ACAS scans and STIG evaluations.
• Experience generating and managing security control evaluations and eMASS artifacts.

Responsibilities

• Collaborate with DoD commands to discover cyber risks and develop mitigation plans.
• Review technical and policy details and guide clients through plan-of-action presentations.
• Translate security concepts for decision-makers and support RMF accreditation and continuous monitoring.

Skills

RMF accreditation

DoD RMF lifecycle management

NIST Revision 5 controls

ACAS/STIG evaluations

eMASS documentation

Education

HS diploma or GED

DoD ISSM CWF Certification OR Bachelor's degree in IT/Cybersecurity/CS/IS/Data Science/Software Eng

Job description

Booz Allen Hamilton looks for an information security risk specialist to help DoD clients assess cyber risk, review RMF packages, and guide authorities to actionable plans. You will translate complex security concepts into practical recommendations and support accreditation through eMASS, policies, and control documentation.

Ideal candidates bring 5+ years of RMF experience, knowledge of NIST 5 controls, and hands-on ACAS/STIG evaluations, with strong communication and a security-focused mindset.