Senior Cybersecurity Risk Advisor (RMF/FISMA Expert)

ASSYST; Baltimore (MD); On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Medical

Dental

Vision

401(k)

Disability insurance

Flexible spending accounts

Job summary

ASSYST is seeking a Cybersecurity Risk Advisor to support federal cybersecurity programs. The role focuses on evaluating risk posture, RMF expertise, and guiding stakeholders on actions for risk reduction, with emphasis on PII/PHI handling and regulatory alignment.

The ideal candidate will have over a decade of experience in information security programs, a strong RMF background, and the ability to communicate complex risk to executive leadership.

Qualifications

• 10+ years of professional experience developing information security and risk management programs per frameworks and standards (FISMA, NIST, HIPAA).
• Proven ability to evaluate risk posture for multiple systems and communicate executive-level findings.
• Strong understanding of RMF, ATO processes, and security controls implementation.

Responsibilities

• Evaluate and communicate risk posture of each system to executive leadership and make risk-based recommendations.
• Ensure risk management framework requirements are implemented and enforced across systems.
• Verify information security testing within the SDLC and apply results to development.
• Review security artifacts and provide recommendations to improve posture.
• Approve selected system configuration deviations from the baseline as the authority.
• Coordinate with ISSO and PII/PHI data owners to classify information and ensure legal authority.
• Determine privacy impacts and manage information security and privacy risk.

Skills

RMF knowledge

FISMA experience

NIST SP 800-series

Risk assessment

Stakeholder communication

MS Office

Education

Bachelor's degree in Computer Science, Information Technology, Cyber Security, or related field

CISSP

CISM

Job description

ASSYST is seeking a Cybersecurity Risk Advisor to support federal cybersecurity programs. The role focuses on evaluating risk posture, RMF expertise, and guiding stakeholders on actions for risk reduction, with emphasis on PII/PHI handling and regulatory alignment.

The ideal candidate will have over a decade of experience in information security programs, a strong RMF background, and the ability to communicate complex risk to executive leadership.