Skip to main content
CareerApp

Skill

Risk Management Framework

Certifications and Credentials

A Risk Management Framework (RMF) is a structured set of processes and guidelines that organizations use to identify, assess, manage, and monitor risk in a consistent, repeatable way, such as the NIST Risk Management Framework used in U.S. federal information security or ISO 31000 for general risk management. Compliance officers, security professionals, and risk managers use these frameworks to standardize risk practices, ensure regulatory compliance, and support audits. They typically define stages such as risk identification, assessment, response, and continuous monitoring.

See who is hiringThe most in-demand skills in job postings →

Risk Management Framework in the job market

Last checked October 28, 2026

Open roles
10

on Career App

Employers
9

hiring for it

Median pay
—

not enough disclosed

Disclose pay
—

of these roles

Open roles requiring Risk Management Framework (9)

Information System Security Engineer

Space Systems Command

Full-time · Peterson AFB, Colorado · $91,870 – $142,022

A cybersecurity engineer embedded in military space command systems development, responsible for integrating security architecture and compliance into battle management capabilities across their entire lifecycle. The role suits experienced IT security professionals who combine deep technical assessment skills with the ability to lead cross-functional teams and communicate complex security needs to both engineers and military stakeholders.

Via USAJOBS · Apply there ↗

INFORMATION TECHNOLOGY SPECIALIST (INFOSEC)

Defense Counterintelligence and Security Agency

Huntsville, AL · $110,401 – $144,102

The Defense Counterintelligence and Security Agency seeks an information security professional to oversee compliance and technical controls at defense contractors' cleared facilities, using the Risk Management Framework to assess systems that handle classified information. This role combines technical security expertise with stakeholder engagement across multiple contractor sites nationwide.

Via USAJOBS · Apply there ↗

IT SPECIALIST (INFOSEC/PLCYPLN)

United States Fleet Forces Command

Fort Meade Naval Facilities, Maryland · $121,785 – $158,322

This federal cybersecurity role involves conducting independent security assessments and vulnerability testing on military information systems and networks to ensure compliance with security policies and frameworks. The position suits experienced IT security professionals who can evaluate security controls, document risks, and work with system owners to improve defensive posture.

Via USAJOBS · Apply there ↗

Supervisory IT Cybersecurity Specialist-Direct Hire

Bureau of Alcohol, Tobacco, Firearms and Explosives

Washington, DC · $169,279 – $197,200

This is a leadership role overseeing cybersecurity operations and policy for a federal agency, suited to experienced security professionals ready to manage teams and shape enterprise-wide security strategy. The position requires deep expertise in federal compliance frameworks like FISMA and NIST standards, along with hands-on experience directing risk management and incident response programs.

Via USAJOBS · Apply there ↗

IT PROJECT MANAGER (SYSANALYSIS)

Defense Finance and Accounting Service

Rome, NY · $89,508 – $121,502

This is a systems analyst role supporting the Department of Defense's financial management systems, focused on planning system changes, resolving technical problems, and ensuring compliance with DoD policies during application development and modernization. The position suits someone with IT infrastructure or systems experience who can coordinate across technical teams and stakeholders to implement secure, policy-compliant solutions.

Via USAJOBS · Apply there ↗

Program Manager (Application Management)

U.S. Army Corps of Engineers

District of Columbia, District of Columbia · $121,785 – $158,322

This role manages technology projects and systems modernization for a U.S. Army Corps of Engineers division, overseeing everything from initial requirements through deployment while ensuring security compliance. It suits someone with hands-on experience delivering enterprise software initiatives, managing technical teams, and navigating government IT governance frameworks.

Via USAJOBS · Apply there ↗

IT CYBERSECURITY SPECIALIST (INFOSEC)

Warfighting Acquisition University

San Diego, CA · $76,463 – $164,301

This federal cybersecurity role manages risk frameworks and security controls for Department of War information systems, suitable for candidates with hands-on experience in authorization processes, vulnerability management, and continuous monitoring of enterprise systems.

Via USAJOBS · Apply there ↗

Supervisory IT Specialist (PLCYPLN)

Defense Media Activity

Fort Meade, Maryland · $143,913 – $187,093

A senior IT leadership role overseeing policy, strategy, and infrastructure modernization for a military educational organization. This position suits experienced IT managers with demonstrated expertise in enterprise architecture, cybersecurity compliance, and the ability to advise senior leadership on complex technology investments.

Via USAJOBS · Apply there ↗

Delta Information Systems Security Developer

Space Systems Command

Full-time · Kirtland AFB, New Mexico · $90,479 – $139,871

The Space Force seeks a cybersecurity specialist to embed within a space systems development team, ensuring security controls and policies protect ground systems, launch infrastructure, and space vehicles throughout their lifecycle. This role suits someone with formal security credentials or a relevant degree who can serve as the technical authority on compliance frameworks and threat mitigation in a research and operational environment.

Via USAJOBS · Apply there ↗

Related skills

Curated neighbors in the taxonomy, whether or not employers ask for them together.

Turn on analytics and we load Google Analytics: Google gets the pages you open and what you do here — searches, jobs you view, jobs you apply to — and sets its own cookies. Leave it off and the only cookies we set are your login, your theme, and this answer. Accept All also records a yes to advertising, which nothing uses yet. Privacy Policy.