RemoteLeaf Logo
Log in Sign up

RMF/Assessment & Authorization (A&A) Analyst

2 hours, 17 minutes ago
United States
Full-time
Senior
Security Analyst
Cybersecurity
AWS Azure GCP
Apply Now
Skyepoint Decisions

Skyepoint Decisions

Skyepoint Decisions specializes in providing comprehensive IT solutions for the federal government, focusing on cybersecurity architecture, critical infrastructure operations, and applications development and maintenance to support a secure and mobile ...

Internet Software & Services
51-250
Founded 2009
View All Jobs 8

Description

  • Support development, maintenance, validation, and closure tracking of POA&Ms.
  • Coordinate remediation tracking and validate corrective-action evidence for POA&M closures.
  • Support privacy activities including PTAs, PIAs, and privacy requirement integration.
  • Support RMF activities across the system development lifecycle.
  • Assist with system categorization, boundary definition, and security control implementation.
  • Maintain and update authorization documentation, artifacts, and packages.
  • Collect, validate, and organize required security evidence from stakeholders.
  • Support reauthorization, decommissioning, and quality control reviews of security documentation.
  • Participate in authorization working groups, compliance meetings, and reporting to leadership.
  • Support cybersecurity awareness and compliance initiatives.

Requirements

  • Bachelor's degree in Cybersecurity, Computer Science, Information Systems, Information Assurance, or a related discipline.
  • Minimum 5 years of cybersecurity, information assurance, or RMF experience supporting federal information systems.
  • Experience supporting Assessment & Authorization (A&A) efforts and RMF processes.
  • Familiarity with NIST Risk Management Framework (SP 800-37), NIST SP 800-53 Rev. 5, and FISMA.
  • Experience preparing or maintaining security documentation and authorization artifacts.
  • Strong analytical, organizational, and communication skills.
  • U.S. Citizenship required.
  • Ability to obtain and maintain a Public Trust.
  • Preferred certifications include GCIH, ECIH, Security+, CEH, CySA+, GCFA, CISSP, or OSCP.
  • Experience supporting HHS or other federal civilian agencies.
  • Experience using GRC platforms such as eMASS, Xacta, Archer, or ServiceNow GRC.
  • Experience supporting cloud environments such as AWS, Azure, or GCP.
  • Knowledge of Zero Trust Architecture, CDM, and FedRAMP requirements.
  • Experience working in a FISMA-compliant environment.

Benefits

  • Salary range of $115,000 to $135,000.
  • Certification incentive program.
  • PTO and floating federal holiday options.
  • Medical insurance options including HMO and High Deductible plans with HSA and FSA options.
  • Full dental, vision, short-term disability, long-term disability, and life insurance coverage.
  • 401(k) with company match.
  • Flexible work environment.
  • Professional development support through certification rewards.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

RegScale

Cyber Security Intern

RegScale 11-50 Utilities

RegScale is seeking a Cyber Security Intern to support its security team in protecting production SaaS systems while gaining exposure to security operations, compliance, GRC, and cloud security.

Anywhere Internship Entry Level Security Analyst
AWS Azure Cybersecurity Encryption GCP SIEM
2 hours, 17 minutes ago
B

Fraud Jr Analyst

Banco Plata, S.A., Institución de Banca Múltiple. 1001-5000 Banking / financial services

Plata CF busca un Analista de Fraude Jr para apoyar la detección, investigación y prevención de fraudes en su etapa de expansión en Colombia.

Colombia Full-time Entry Level Security Analyst
SQL
3 hours, 17 minutes ago
B

Risk Antifraud Analyst [CO Portfolio Risk]

Banco Plata, S.A., Institución de Banca Múltiple. 1001-5000 Banking / financial services

Risk Antifraud Analyst on the Portfolio Risk Team at a fintech company, responsible for building and scaling fraud prevention capabilities for lending operations in Colombia.

Africa Europe Full-time Mid Level Security Analyst
Machine Learning Python SQL
3 hours, 17 minutes ago
Flexential

Incident Response Analyst I

Flexential 251-1K Internet Software & Services

Flexential is hiring an Incident Response Analyst I to triage customer incidents, troubleshoot technical issues, and deliver responsive support for customer environments.

United States Full-time Junior Security Analyst
$52k-$54k
Bash FTP Git Linux Load Balancing PowerShell SSH
3 hours, 17 minutes ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers