ZipRecruiter

Log In

1

Nist Rmf Jobs (NOW HIRING)

Core One

Security Engineer

Mclean, VA · On-site

Lead and support FedRAMP Moderate/High and IC ATO authorization efforts, ensuring compliance with NIST RMF, NIST 800-53, NIST 800-37, FedRAMP, and ICD 503 requirements. * Conduct risk assessments ...

MDT Technical

Security Analyst II

Madison, WI · On-site

Understanding of NIST Cybersecurity Framework, NIST RMF, and other common security standards. * Experience and working knowledge of common security frameworks and control theories to include current ...

Core One

Security Engineer

Mclean, VA · On-site

Lead and support FedRAMP Moderate/High and IC ATO authorization efforts, ensuring compliance with NIST RMF, NIST 800-53, NIST 800-37, FedRAMP, and ICD 503 requirements. * Conduct risk assessments ...

Latitude Inc

ISSO (Top Secret Cleared)

Farmington, NM · On-site

$120K - $132K/yr

This role is responsible for ensuring systems meet federal cybersecurity and compliance requirements (NIST RMF, FISMA, FedRAMP as applicable) and for coordinating with system owners, engineers, and ...

Zfinity Global

Security Analyst -II

Madison, WI · On-site

At least 2 years of experience required in the following: · Understanding of NIST Cybersecurity Framework, NIST RMF, and other common security standards. · Experience and working knowledge of ...

next page

Showing results 1-20

All JobsNist Rmf Jobs

Nist Rmf information

See salary details

$43K

$99.4K

$150K

How much do nist rmf jobs pay per year?

As of Jul 11, 2026, the average yearly pay for nist rmf in the United States is $99,400.00, according to ZipRecruiter salary data. Most workers in this role earn between $79,500.00 and $115,500.00 per year, depending on experience, location, and employer.

What is NIST RMF?

NIST RMF stands for the National Institute of Standards and Technology Risk Management Framework. It is a structured process used by federal agencies and organizations to identify, assess, and manage cybersecurity risks to information systems. The RMF provides a set of steps that guide organizations through the selection, implementation, assessment, and monitoring of security controls to ensure systems meet required security standards. This framework is essential for achieving compliance with federal cybersecurity requirements and improving overall information security.

What is the difference between Nist Rmf vs Cybersecurity Analyst?

AspectNist RmfCybersecurity Analyst
CertificationsRisk Management Framework (RMF) certifications, NIST guidelinesCompTIA Security+, CISSP, CEH
Work EnvironmentGovernment agencies, federal projects, compliance-focusedPrivate sector, IT departments, security teams
Industry UsagePrimarily in federal and defense sectorsAcross various industries including finance, healthcare, tech
Primary FocusImplementing and managing risk management frameworksMonitoring, analyzing, and responding to security threats

While Nist Rmf specialists focus on establishing and maintaining risk management processes based on NIST standards, Cybersecurity Analysts are more involved in threat detection and incident response. Both roles require security knowledge but serve different functions within cybersecurity frameworks.

What are some typical challenges faced by professionals implementing the NIST RMF in an organization?

Professionals working with the NIST Risk Management Framework (RMF) often encounter challenges such as aligning organizational processes with RMF requirements, ensuring stakeholder buy-in, and maintaining comprehensive documentation. Adapting legacy systems to meet modern security controls can be complex, and coordinating efforts across multiple teams—such as IT, compliance, and management—requires strong communication skills. Staying current with evolving NIST guidelines and integrating continuous monitoring into daily operations are also important aspects to manage for success in this role.

What are the key skills and qualifications needed to thrive as a NIST RMF (Risk Management Framework) specialist, and why are they important?

To thrive as a NIST RMF specialist, you need a solid understanding of information security principles, risk assessment, compliance standards, and often a background in cybersecurity or IT, supported by certifications like CISSP, CAP, or Security+. Familiarity with NIST SP 800-37, eMASS, and other GRC (Governance, Risk, and Compliance) tools is typically required. Attention to detail, analytical thinking, and strong communication skills help professionals navigate complex regulatory requirements and effectively collaborate with stakeholders. These skills are essential for ensuring organizational compliance, safeguarding sensitive data, and managing security risks efficiently.
More about Nist Rmf jobs
What states have the most Nist Rmf jobs? States with the most job openings for Nist Rmf jobs include:
What job categories do people searching Nist Rmf jobs look for? The top searched job categories for Nist Rmf jobs are:
Nist Rmf jobs near you
Infographic showing various Nist Rmf job openings in the United States as of July 2026, with employment types broken down into 95% Full Time, 2% Part Time, and 3% Contract. Highlights an 76% Physical, 7% Hybrid, and 17% Remote job distribution, with an average salary of $99,400 per year, or $47.8 per hour.
Information Systems Security Officer (ISSO)

Information Systems Security Officer (ISSO)

Cruz Associates Inc

Fort Campbell, KY • On-site

Full-time

Posted 14 days ago

Job description

Cruz Associates Inc. of Yorktown, VA (www.cruzinc.us) has an open position for a Information Systems Security Officer (ISSO). The job location is at Fort Campbell, KY. Interested candidates can apply at the following link: Information Systems Security Officer (ISSO), by completing the application and uploading their resume.

Scope: Cruz Associates, Inc. is seeking an Information Assurance (IA) professional to serve as a primary technical liaison, specifically requiring a deep regulatory background to confidently address and resolve rigorous compliance inquiries using U.S. security frameworks. This role requires a deep working knowledge of NIST RMF, FISMA, and the NIST SP 800 series, particularly as they apply to mission-critical tactical platforms and embedded systems. You will translate complex U.S. technical artifacts into clear assurance narratives, engage directly with original equipment manufacturers (OEMs), and senior leadership. The ideal candidate has experience working across allied government security frameworks and can confidently defend U.S. compliance postures to foreign stakeholders.

Required Skills:

  • Deep working knowledge of U.S. information assurance frameworks, specifically NIST RMF, FISMA, and the NIST SP 800 series.
  • Proven ability to act as a technical liaison, fielding and resolving rigorous regulatory and compliance inquiries from allied partner nations.
  • Experience applying IA and cybersecurity standards to mission-critical tactical platforms and embedded systems.
  • Demonstrated ability to translate complex U.S. technical artifacts into clear, actionable assurance narratives for leadership.
  • Strong stakeholder engagement skills, with experience coordinating directly with original equipment manufacturers (OEMs) and engineering teams.
  • Exceptional verbal and written communication skills, with the confidence to defend technical compliance postures to foreign stakeholders.
  • 8570 IAM Level II certification

Preferred Skills:

  • Prior experience serving as an assurance liaison or integrator between the U.S. and allied government security frameworks (e.g., U.S. to U.K.).
  • Familiarity with the cyber accreditation lifecycle for large-scale, complex defense platforms (such as aircraft or other major tactical systems).
  • Experience supporting formal risk acceptance forums and briefing senior risk authorities.
  • A risk-focused and independent mindset, with the confidence to challenge technical findings or push back on continuous inquiries when necessary.

Apply