ZipRecruiter

Log In

1

Nist Rmf Jobs in Maryland (NOW HIRING)

System One

RMF IT Security Analyst

Bethesda, MD · On-site

Support the implementation and maintenance of the NIST RMF program. * Develop, review, and maintain RMF documentation including SSPs, SARs, POA&Ms, and authorization packages. * Support system ...

FGS LLC

Cybersecurity /RMF Lead - Cloud

Suitland, MD · On-site

$150K - $165K/yr

NIST SP 800-53 Rev. 5 * NIST SP 800-53A * CNSSI 1253 * DoDI 8510.01 * DoD Cloud Computing Security Requirements Guide (SRG) * Department of the Navy cybersecurity policies * Intelligence Community ...

New

FGS LLC

Cybersecurity /RMF Lead - Cloud

Suitland, MD · On-site

$150K - $165K/yr

NIST SP 800-53 Rev. 5 * NIST SP 800-53A * CNSSI 1253 * DoDI 8510.01 * DoD Cloud Computing Security Requirements Guide (SRG) * Department of the Navy cybersecurity policies * Intelligence Community ...

Motorola

You will apply deep technical and compliance expertise to evaluate, advise, and guide clients through FedRAMP, FISMA, and NIST RMF requirements. You will also lead technical discussions, mentor team ...

FGS LLC

Cybersecurity /RMF Lead - Cloud

Suitland, MD

$150K - $165K/yr

NIST SP 800-53 Rev. 5 * NIST SP 800-53A * CNSSI 1253 * DoDI 8510.01 * DoD Cloud Computing Security Requirements Guide (SRG) * Department of the Navy cybersecurity policies * Intelligence Community ...

next page

Showing results 1-20

All JobsNist Rmf JobsNist Rmf Jobs in Maryland

Nist Rmf information

What is NIST RMF?

NIST RMF stands for the National Institute of Standards and Technology Risk Management Framework. It is a structured process used by federal agencies and organizations to identify, assess, and manage cybersecurity risks to information systems. The RMF provides a set of steps that guide organizations through the selection, implementation, assessment, and monitoring of security controls to ensure systems meet required security standards. This framework is essential for achieving compliance with federal cybersecurity requirements and improving overall information security.

What are the key skills and qualifications needed to thrive as a NIST RMF specialist?

To thrive as a NIST RMF specialist, you need a solid understanding of information security principles, risk assessment, compliance standards, and often a background in cybersecurity or IT, supported by certifications like CISSP, CAP, or Security+. Familiarity with NIST SP 800-37, eMASS, and other GRC (Governance, Risk, and Compliance) tools is typically required. Attention to detail, analytical thinking, and strong communication skills help professionals navigate complex regulatory requirements and effectively collaborate with stakeholders. These skills are essential for ensuring organizational compliance, safeguarding sensitive data, and managing security risks efficiently.

What are some typical challenges faced by professionals implementing the NIST RMF in an organization?

Professionals working with the NIST Risk Management Framework (RMF) often encounter challenges such as aligning organizational processes with RMF requirements, ensuring stakeholder buy-in, and maintaining comprehensive documentation. Adapting legacy systems to meet modern security controls can be complex, and coordinating efforts across multiple teams—such as IT, compliance, and management—requires strong communication skills. Staying current with evolving NIST guidelines and integrating continuous monitoring into daily operations are also important aspects to manage for success in this role.

What is the difference between Nist Rmf vs Cybersecurity Analyst?

AspectNist RmfCybersecurity Analyst
CertificationsRisk Management Framework (RMF) certifications, NIST guidelinesCompTIA Security+, CISSP, CEH
Work EnvironmentGovernment agencies, federal projects, compliance-focusedPrivate sector, IT departments, security teams
Industry UsagePrimarily in federal and defense sectorsAcross various industries including finance, healthcare, tech
Primary FocusImplementing and managing risk management frameworksMonitoring, analyzing, and responding to security threats

While Nist Rmf specialists focus on establishing and maintaining risk management processes based on NIST standards, Cybersecurity Analysts are more involved in threat detection and incident response. Both roles require security knowledge but serve different functions within cybersecurity frameworks.

What are popular job titles related to Nist Rmf jobs in Maryland?

For Nist Rmf jobs in Maryland, the most frequently searched job titles are:

What job categories do people searching Nist Rmf jobs in Maryland look for?

The top searched job categories for Nist Rmf jobs in Maryland are:

Nist Rmf jobs near you
Infographic showing various Nist Rmf job openings in Maryland as of August 2026, with employment types broken down into 96% Full Time, and 4% Contract. Highlights an 92% In-person, and 8% Remote job distribution.

RMF IT Security Analyst

System One Holdings, LLC

Bethesda, MD • On-site

$120K - $130K/yr

Full-time

Medical, Dental, Vision, Life, Retirement

Posted 24 days ago

Job description

Job Title: RMF IT Security Analyst
Location: Bethesda, Maryland
Type: Direct Hire / Perm
Work Model: 99% remote with occasional onsite for meetings
Security Clearance: Public Trust
Position Summary
The RMF IT Security Analyst serves as a mid-level cybersecurity professional. Working under Lead and Senior RMF personnel, the analyst independently supports RMF lifecycle activities, security assessments, continuous monitoring, and compliance initiatives while mentoring junior staff. Work is primarily remote with occasional on-site meetings.
Key Responsibilities
  • Support the implementation and maintenance of the NIST RMF program.
  • Develop, review, and maintain RMF documentation including SSPs, SARs, POA&Ms, and authorization packages.
  • Support system categorization, security control selection, assessments, authorization, and continuous monitoring.
  • Maintain the Risk Management Register and track remediation activities.
  • Support cybersecurity audits and assessments conducted by NIH, HHS, OIG, GAO, and other oversight organizations.
  • Support Cybersecurity Supply Chain Risk Management (C-SCRM) activities, including vendor documentation and SBOM reviews.
  • Manage or assist with Risk Mitigation Waivers, documentation, approvals, annual reviews, and tracking.
  • Coordinate contingency plan testing and document results and corrective actions.
  • Communicate risk posture and compliance status while collaborating with system owners, ISSOs, and technical teams.
  • Provide technical guidance and mentoring to junior analysts.

Required Qualifications
Bachelor's degree in a related technical field (or equivalent experience) and 3-5 years supporting RMF, cybersecurity compliance, or information security programs.
Preferred Qualifications
  • Experience supporting federal civilian agencies, including NIH, HHS, or other Federal agencies.
  • Familiarity with NIST RMF, NIST SP 800-37, NIST SP 800-53 Rev. 5, and the Joint Cybersecurity Assessment Methodology (JCAM).
  • Experience using eMASS or similar Governance, Risk, and Compliance (GRC) platforms.
  • Experience supporting cybersecurity audits, POA&M management, continuous monitoring, and contingency planning.
  • Knowledge of Cybersecurity Supply Chain Risk Management (C-SCRM).
  • Experience developing or reviewing SSPs, SARs, SAPs, POA&Ms, and Authorization Packages.

Desired Certifications
  • ISC2 Certified in Cybersecurity (CC)
  • CompTIA Security+
  • CompTIA CySA+
  • CompTIA SecurityX (formerly CASP+)
  • CompTIA PenTest+
  • CAP/CGRC
  • CISSP
  • CISM
  • Knowledge, Skills, and Abilities
    Strong analytical, organizational, and communication skills with knowledge of RMF processes, documentation, and federal cybersecurity compliance. Ability to collaborate with system owners, ISSOs, and technical teams.
    Work Environment
    This position is primarily remote with occasional on-site meetings or support activities as required.

System One, and its subsidiaries including Joulé and Mountain Ltd., are leaders in delivering outsourced services and workforce solutions across North America. We help clients get work done more efficiently and economically, without compromising quality. System One not only serves as a valued partner for our clients, but we offer eligible employees health and welfare benefits coverage options including medical, dental, vision, spending accounts, life insurance, voluntary plans, as well as participation in a 401(k) plan.
System One is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, age, national origin, disability, family care or medical leave status, genetic information, veteran status, marital status, or any other characteristic protected by applicable federal, state, or local law.
#M-2
#LI-CB5
Ref: #856-Baltimore-S1

Apply