NIST Risk Management Framework SME

Job not on LinkedIn

🕒 January 12

🎸 Tennessee – Remote

🎸 Tennessee – Remote

⏰ Full Time

🟡 Mid-level

🟠 Senior

🎲 Risk

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Boston Government Services, LLC (BGS)

WebsiteLinkedInAll Job Openings

201 - 500 employees

Founded 2007

🏛️ Government

⚡ Energy

🔒 Cybersecurity

Government • Energy • Cybersecurity

Boston Government Services, LLC (BGS) is an engineering and technology services firm that provides cybersecurity, environmental management, nuclear operations, nuclear technology, renewable energy, and related technical solutions primarily to the U. S. federal government and the energy sector. BGS emphasizes work in highly regulated, secure environments—offering Cybersecurity & IT (including CMMC compliance), Environmental Management, Fire Protection, Nuclear Operations and Technology, and Renewable Energy services. Headquartered in Oak Ridge, TN, the company positions itself as a mission-focused contractor delivering engineering, technology, and cybersecurity solutions for government and energy clients.

📋 Description

• Lead RMF activities for federal systems, ensuring compliance with NIST SP 800-53 and related standards. • Develop and maintain System Security Plans (SSPs), Security Assessment Reports (SARs), and Plans of Action & Milestones (POA&Ms). • Conduct gap analyses and risk assessments to identify compliance deficiencies and recommend remediation strategies. • Provide expert guidance on security control implementation and documentation for Authorization to Operate (ATO) packages. • Support security audits and assessments, including preparation for FISMA and FedRAMP requirements. • Deliver training and workshops on RMF processes and NIST SP 800-53 controls. • Collaborate with system owners, ISSOs, and other stakeholders to ensure continuous monitoring and risk mitigation.

🎯 Requirements

• Bachelor’s degree in Cybersecurity, Information Systems, or related field (or equivalent experience) • Minimum 5 years of experience in cybersecurity compliance, with at least 3 years focused on RMF and NIST SP 800-53 • Demonstrated experience developing SSPs, POA&Ms, and conducting security assessments • Strong understanding of NIST SP 800 series (800-53, 800-37, 800-171) and FISMA requirements • Professional certifications such as CISSP, CISM, CISA, or equivalent are required • Excellent technical writing and communication skills for compliance documentation.

🏖️ Benefits

• Health, Dental, Vision, Life Insurance • Paid Vacation • 401K • Long and Short-Term Disability