Cybersecurity Compliance and Risk Manager

Booz Allen Hamilton

Confirmed live today High trust

Hybrid

Quick summary

Work type: Hybrid
Location: Newport, RI
Salary: $61,900–$141,000 / yr
Employment: Full-time
Posted: 71 days ago
Freshness: Confirmed live today
Closes: Nov 15, 2026
Nearby: 28 roles within 25 mi

Market check

Salary context

Below market

How this pay compares to similar roles

Similar $180k

This role $101k

$44k $233k

below market most similar roles pay here above market

This role pays less than 98% of similar roles. Most pay $146,242–$214,225 — the blue band above. At the midpoint, this role pays about $101k versus about $180k for comparable roles.

Based on 240 similar postings.

Employer

About Booz Allen Hamilton

Booz Allen Hamilton is a management and technology consulting firm that provides analytics, digital, engineering, and cybersecurity solutions primarily to U.S. government agencies and commercial clients. Industry: Management & Technology Consulting

Booz Allen Hamilton currently has 1662 open roles on FindRole.

Listed pay typically runs $86,800–$198,000 across 904 roles with salary data.

Most-posted roles

View all roles at Booz Allen Hamilton

At a glance

TL;DR · Cybersecurity Compliance and Risk Manager

Role Posting Log in to save

The Cybersecurity Compliance and Risk Manager is a hybrid technical and compliance-focused role responsible for designing and managing procedures to ensure database, software, and system-level security across client infrastructures. You will lead Risk Management Framework execution, including security control attribution, documentation, assessment, and authorization. Daily tasks involve implementing and validating NIST SP 800-53 security controls, performing vulnerability assessments, and maintaining continuous monitoring for system compliance. You will utilize DoD security tools such as ACAS, VRAM, and eMASS while applying STIGs and SRGs across network environments. The role requires managing enterprise POA&Ms and collaborating with stakeholders to develop mitigation strategies. Key technical requirements include experience with DoD or Navy cybersecurity, Secret clearance, and certifications like Security+ CE, CISM, or CISSP to solve complex security lifecycle challenges.

Skills

RMF NIST SP 800-53 ACAS eMASS VRAM STIGs SRGs POA&M Xacta ESS Altiris ServiceNow VMware Cisco TCP IP VLANs Firewalls Network Architecture Vulnerability Assessment

What you'll do

Lead RMF execution including security control attribution, documentation, assessment, and authorization.
Implement and validate NIST SP 800-53 security controls across enterprise systems.
Maintain continuous monitoring activities for system compliance and risk visibility.
Perform vulnerability assessments and risk analysis using ACAS, VRAM, and eMASS tools.
Apply and verify DoW STIGs and SRGs across software, database, and network environments.
Manage enterprise POA&Ms to track and remediate security findings.
Develop mitigation strategies and communicate technical risks to clients and SMEs.
Provide guidance and mentorship to cybersecurity team members.

What we're looking for

3+ years of experience with DoW or Navy cybersecurity and Risk Management Framework (RMF).
3+ years of experience with cyber vulnerability assessment, remediation, and mitigation tools including ACAS, eMASS, and VRAM.
1+ years of experience working with DoW STIGs and SRGs.
Experience implementing, documenting, assessing, and monitoring NIST SP 800-53 security controls.
HS diploma or GED.
DoW 8140 Certification such as Security+ CE, CISM, CISSP, or SecurityX Certification.
Bachelor’s degree in a technical field (preferred); Master’s degree in a technical field (preferred).
Secret clearance.

Save