Cybersecurity Compliance and Risk Manager

What you'll do

• Lead RMF execution including security control attribution, documentation, assessment, and authorization.
• Implement and validate NIST SP 800-53 security controls across enterprise systems.
• Perform vulnerability assessments and risk analysis using tools like ACAS, VRAM, and eMASS.
• Apply and verify DoW STIGs and SRGs across software, database, and network environments.
• Manage enterprise POA&Ms to track and remediate identified security findings.
• Maintain continuous monitoring activities for system compliance and risk visibility.
• Develop mitigation strategies and communicate technical risks to clients and SMEs.
• Provide guidance and mentorship to cybersecurity team members.

What we're looking for

• 3+ years of experience with DoD or Navy cybersecurity and Risk Management Framework (RMF).
• 3+ years of experience with cyber vulnerability assessment, remediation, and mitigation tools including ACAS, eMASS, and VRAM.
• 1+ years of experience working with DoD STIGs and SRGs.
• Experience implementing, documenting, assessing, and monitoring NIST SP 800-53 security controls.
• Secret clearance required.
• High school diploma or GED.
• DoD 8140 Certification such as Security+ CE, CISM, CISSP, or SecurityX Certification.
• Experience as an NQV, ISSE, or with Xacta, ESS, Altiris, and ServiceNow (preferred); Bachelor's or Master's degree in a technical field (preferred).