5 rmf analyst jobs at 4 companies in San Francisco, CA
1mo
Save
Mark Applied
Hide
1mo
Senior Information Security Analyst
Petaluma, California, United States
$100k-$140k/yrOnsiteFull Time
Goldbelt: Alaska Native providing government contracting and technology solutions.
5+ YOE5+ years relevant experience; detailed knowledge of DoD RMF; IAO/ISSO or IAM/ISSM experience; DoD 8570.01 certifications (CISSP, GSLC) or equivalent; eligible for Public Trust; strong communication, leadership, and MS Office skills.
Microsoft Excel, Microsoft Word, Microsoft PowerPoint, Microsoft Outlook, Microsoft Visio, Microsoft Access, eMASS, ACAS, Security Content Automation Protocol (SCAP) Compliance Checker, CDS
Peregrine Technical Solutions: Federal government contractor providing IT and cybersecurity professional services.
5+ YOE5+ years relevant experience, DoD RMF knowledge, IAO/ISSO or IAM/ISSM experience, DoD 8570 certifications (CISSP, GSLC or equivalent), eligible for Public Trust, proficient with eMASS, ACAS, SCAP tools and Microsoft Office.
eMASS, ACAS, Security Content Automation Protocol (SCAP), SCAP Compliance Checker, Microsoft Excel, Microsoft Word, Microsoft PowerPoint, Microsoft Outlook, Microsoft Visio, Microsoft Access
Goldbelt: Provides government contracting, tourism operations, and marine transportation services.
5+ YOE5+ years relevant experience with DoD RMF, IAO/ISSO or IAM/ISSM background; DoD 8570.01 certification (CISSP, GSLC or equivalent); eligible for federal Public Trust; proficient with eMASS, ACAS, SCAP tools and Microsoft Office.
eMASS, Assured Compliance Assessment Solution (ACAS), Security Content Automation Protocol (SCAP) Compliance Checker, Microsoft Excel, Microsoft Word, Microsoft PowerPoint, Microsoft Outlook, Microsoft Visio, Microsoft Access
Senior Information Security Analyst, GRC/Responsible AI
Irvine or Milpitas
$125k-$207k/yrOnsiteFull Time
SandiskNasdaq: SNDK: Designs and manufactures flash memory and data storage products.
6+ YOE6+ years information security experience with GRC and AI risk management, bachelor's or equivalent, technical proficiency in threat modeling and risk assessment, familiarity with NIST AI RMF and ISO/IEC 42001, and strong cross‑functional communication.
OWASP Top 10 for LLM Applications, NIST AI RMF, ISO/IEC 42001, STRIDE, PASTA, attack tree analysis, CI/CD
TikTok USDS Joint Venture: Operates and secures TikTok services for U.S. users.
3+ YOE3+ years experience in compliance analytics, regulatory reporting, risk metrics, and automation; hands-on Python or scripting, experience with U.S. compliance frameworks and enterprise KRI/KPI reporting.