Senior Cybersecurity Risk Advisor - RMF & FISMA Expert

ASSYST, Inc.; Baltimore (MD); On-site; USD 140,000 - 190,000; Full time

Benefits offered by this job

Medical benefits

Dental benefits

Vision benefits

401(k) retirement plan

Disability insurance

Flexible spending accounts

Job summary

ASSYST, Inc. is seeking a Cybersecurity Risk Advisor to support the federal Cybersecurity program. The role focuses on evaluating, maintaining, and communicating the risk posture for each FISMA system to executive leadership and making risk-based recommendations.

The candidate will act as the RMF subject matter expert, guiding stakeholders on actions and best practices for closure of weaknesses, and work with the ISSO on threat management and privacy concerns.

Qualifications

• 10+ years of experience developing and implementing information security programs per security frameworks (FISMA, NIST SP-800 series).
• Bachelor’s degree in a related field; CISSP, CISM or equivalent certifications preferred.
• Deep knowledge of FISMA, HIPAA/privacy and NIST SP 800-53/800-34/800-37/800-53A/800-63 series.

Responsibilities

• Evaluate, maintain and communicate risk posture of each FISMA system to executives.
• Provide RMF guidance and actions to stakeholders for risk closure.
• Monitor security posture by reviewing artifacts and recommending improvements to the ISSO.
• Coordinate with ISSO and PII/PHI handling teams for risk-based decisions.
• Ensure compliance with risk management framework, policies and standards.

Skills

RMF expertise

Risk assessment

Continuous monitoring

FISMA knowledge

Education

Bachelor's degree in Computer Science / IT / Cyber Security

Tools

MS Office

Job description

ASSYST, Inc. is seeking a Cybersecurity Risk Advisor to support the federal Cybersecurity program. The role focuses on evaluating, maintaining, and communicating the risk posture for each FISMA system to executive leadership and making risk-based recommendations.

The candidate will act as the RMF subject matter expert, guiding stakeholders on actions and best practices for closure of weaknesses, and work with the ISSO on threat management and privacy concerns.