Cybersecurity Compliance and Risk Manager

Booz Allen Hamilton

. Lead RMF execution, including security control attribution, documentation, assessment, and authorization .

Posted 11/9/2026full-timeTampa • Florida • United StatesMid-LevelSenior💰 $86,800 - $198,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in executing the Risk Management Framework (RMF) and implementing NIST SP 800-53 security controls, while providing mentorship and guidance to cybersecurity teams. Proficient in vulnerability assessments and risk analysis using industry-standard tools, with a strong focus on compliance and security best practices.

Highest-signal resume keywords

Risk Management Framework (RMF)NIST SP 800-53 Security ControlsVulnerability Assessment Tools (ACAS, eMASS, VRAM)DoW STIGs and SRGsSecurity+ Certification

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Cyber Vulnerability AssessmentRisk AnalysisSecurity Control AttributionContinuous MonitoringMitigation Strategies DevelopmentAuthority to Operate (ATO) PackagesSoftware Development Lifecycle Security IntegrationDocumentation and Assessment of Security ControlsRemediation of Security FindingsTechnical Risk Communication

Soft Skills

MentorshipCollaborationProblem SolvingCommunication

Tools & Technologies

ACASEMASSVRAMMicrosoft AzureAWS Cloud Service Providers

Certifications & Qualifications

Security+ CertificationDoW 8140 Certification (CISM, CISSP, SecurityX Certification)

Industry Keywords

CybersecurityRisk ManagementComplianceContinuous Monitoring ActivitiesTechnical Risks

Tech Stack

Tools & technologies

AWSAzureCloudCyber Security

About the role

Key responsibilities & impact

Lead RMF execution, including security control attribution, documentation, assessment, and authorization
Implement and validate NIST SP 800-53 security controls across enterprise systems
Maintain continuous monitoring activities for system compliance and risk visibility
Perform vulnerability assessments and risk analysis using ACAS, VRAM, and eMASS
Apply and verify DoW STIGs and SRGs across software, database, and network environments
Manage enterprise POA&Ms to track and remediate security findings
Collaborate with clients and SMEs to develop mitigation strategies and communicate technical risks
Provide guidance and mentorship to cybersecurity team members
Integrate security practices throughout the software development lifecycle
Develop innovative solutions to complex security problems
Work with limited direction and potentially supervise team members

Requirements

What you’ll need

3+ years of experience with DoW or USSOCOM cybersecurity and Risk Management Framework (RMF)
3+ years of experience with cyber vulnerability assessment, remediation, and mitigation tools, including ACAS, eMASS, and VRAM
1+ years of experience working with DoW STIGs and SRGs
Experience with Microsoft Azure and AWS Cloud Service Providers
Experience developing and submitting Authority to Operate (ATO) packages
Experience implementing, documenting, assessing, and monitoring NIST SP 800-53 security controls, including drafting implementation or remediation statements into eMASS
Secret clearance required
HS diploma or GED
Security+ Certification
DoW 8140 Certification such as CISM, CISSP, or SecurityX Certification
Bachelor's degree in a technical field preferred
Master's degree in a technical field a plus

Benefits

Comp & perks

Health benefits
Life insurance
Disability benefits
Financial benefits
Retirement benefits
Paid leave
Professional development
Tuition assistance
Work-life programs
Dependent care
Recognition awards program
Identity verification and fraud protection process
Camera-on expectations during virtual meetings