Strategic RMF Cyber Risk Consultant

Relha LLC; Northern (KY); Hybrid; USD 110,000 - 160,000; Full time

Job summary

Deloitte’s GPS practice seeks a Cybersecurity Risk Management Consultant to guide federal and public sector clients through RMF risk management lifecycle, ensuring compliance with NIST guidelines and effective risk mitigation. You will contribute to strategy, assessment, and policy development across complex information systems.

The role emphasizes collaboration, clear communication to technical and executive audiences, and delivering high-quality RMF artifacts within a hybrid work model at

Qualifications

• Bachelor’s degree in cybersecurity, IT, information systems, CS, risk management or related field or equivalent experience
• 4+ years in cybersecurity, information assurance, governance, risk and compliance
• 2+ years applying NIST RMF concepts and NIST SP 800-37/53
• Experience implementing NIST SP 800-53 controls and documenting assessment results
• Experience developing or updating cybersecurity policies mapped to NIST SP 800-53 controls
• Ability to obtain and maintain federal clearance or Public Trust

Responsibilities

• Advise government and public services clients on RMF lifecycle to mitigate risk
• Lead development/review of Authority to Operate packages (SSPs, SARs, POA&M)
• Synthesize risk findings into actionable reports for executive audiences
• Develop risk assessments and mitigation plans aligned to client priorities
• Deliver cyber strategies grounded in leading practices and industry frameworks
• Provide guidance and quality review to junior team members on RMF artifacts

Skills

NIST RMF

NIST SP 800-53

RMF documentation

Federal security compliance

Risk assessment

Cyber risk management

Education

Bachelor's degree in cybersecurity or related field

Job description

Deloitte’s GPS practice seeks a Cybersecurity Risk Management Consultant to guide federal and public sector clients through RMF risk management lifecycle, ensuring compliance with NIST guidelines and effective risk mitigation. You will contribute to strategy, assessment, and policy development across complex information systems.

The role emphasizes collaboration, clear communication to technical and executive audiences, and delivering high-quality RMF artifacts within a hybrid work model at