Cyber Security Manager – FedRAMP

Riveron

Manager for Riveron's Cyber Security Advisory group guiding clients on FedRAMP and CMMC compliance. Responsible for leading assessments, implementing security architectures, and mentoring team members.

Posted 7/21/2026full-timeRemote • 🇺🇸 United StatesMid-LevelSenior💰 $117,500 - $166,250 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Expertise in leading FedRAMP and CMMC readiness assessments, developing System Security Plans, and implementing cloud security architectures aligned with NIST standards. Strong ability to advise on federal security mandates and mentor teams while ensuring compliance with various frameworks.

Highest-signal resume keywords

FedRAMP ComplianceCMMC ComplianceNIST 800-53 FrameworkNIST 800-171 FrameworkSystem Security Plans (SSPs)

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Control Gap AnalysisCloud Security ArchitectureTechnical Security MeasuresVulnerability ManagementIncident Response

Soft Skills

MentoringCollaborationCommunication

Tools & Technologies

GRC SolutionsContinuous MonitoringIAMEncryptionLogging

Certifications & Qualifications

CISACISMCISSPAWS Cloud Practitioner

Industry Keywords

SOC 2ISO 27001HIPAAPCI-DSSThird-Party Assessment Organizations

Tech Stack

Tools & technologies

AWSCloud

About the role

Key responsibilities & impact

Lead FedRAMP Moderate and CMMC readiness assessments, including system boundary validation and control gap analysis
Design and implement cloud security architectures aligned to NIST 800-53 and NIST 800-171 requirements
Develop and own System Security Plans (SSPs), control narratives, and compliance documentation
Partner closely with client engineering, security, and compliance teams to remediate gaps and implement controls
Drive implementation of technical security measures such as encryption, IAM, logging, continuous monitoring, vulnerability management, and incident response
Advise clients on federal and DoD security mandates, including cryptographic requirements and vulnerability remediation timelines
Update and align security policies and procedures to support FedRAMP and CMMC compliance
Conduct preliminary control testing to validate effectiveness prior to formal assessments
Coordinate with Third-Party Assessment Organizations (3PAOs) and C3PAOs during independent assessments
Support assessment execution, evidence collection, remediation cycles, and authorization package submission
Mentor and review work from other consultants, raising the bar on technical quality and delivery
Conduct interviews with prospective team members, assessing candidate suitability while serving as a brand ambassador for the CSA practice and Riveron
Stay current on emerging risks and evolving control practices
Build and maintain strong industry relationships to support long-term business development

Requirements

What you’ll need

Bachelor's and/or Master’s degree in Information Technology (IT), Computer Information Systems (CIS), Management Information Systems (MIS), or a related field
5+ years of deep, demonstrable experience in FedRAMP and/or CMMC compliance efforts in real-world environments
Deep understanding of NIST 800-53 and NIST 800-171 control frameworks
Demonstrated knowledge of other compliance frameworks such as SOC 2, ISO 27001, HIPAA, PCI-DSS
Relevant certification preferred, such as CISA, CISM, CISSP or AWS Cloud Practitioner
Familiarity with GRC solutions, tools, and technologies.

Benefits

Comp & perks

Full range of benefits including medical, dental, and vision insurance
401(k) with company match
PTO