Cyber Security Analyst
About The Position
Sprezzatura is seeking a Cyber Security Analyst to support the Veterans Health Administration (VHA) Enrollment System (VES). The role supports the system’s Authority to Operate (ATO), maintains security authorization documentation, coordinates continuous monitoring, and ensures compliance with FISMA, the NIST Risk Management Framework (RMF), and VA cybersecurity requirements. The position is remote within the United States and requires U.S. citizenship or permanent residency. The analyst serves as the VES System Steward in VA’s ServiceNow Continuous Authorization and Monitoring (CAM) platform; develops and maintains ATO packages and security documentation; coordinates assessments and remediation; and works with system owners, ISSOs, privacy officers, technical teams, and VA cybersecurity stakeholders. Standard business hours are Monday through Friday, with occasional extended or weekend hours potentially required. Reliable internet service suitable for telecommuting is required.
Requirements
- Bachelor degree; experience may be considered in lieu of the degree.
- Experience supporting federal cybersecurity programs; experience within the Department of Veterans Affairs is preferred.
- Strong knowledge of FISMA, NIST RMF, NIST SP 800-53 Rev. 5, and federal security authorization processes.
- Experience with ServiceNow CAM, eMASS, or similar Governance, Risk, and Compliance (GRC) tools.
- Experience developing ATO packages, managing POA&Ms, and coordinating continuous monitoring activities.
- Familiarity with vulnerability management, security assessments, and federal privacy requirements.
- Strong analytical, technical writing, communication, and stakeholder coordination skills.
- At least 3 years of experience serving as a System Steward, ISSO, Cybersecurity Engineer, or RMF Specialist.
- Familiarity with VA cybersecurity policies, procedures, and authorization requirements.
- U.S. citizen or permanent resident.
- Reliable internet service that allows for effective telecommuting.
Nice To Haves
- Experience supporting federal cybersecurity programs within the Department of Veterans Affairs.
- Relevant certifications such as CISSP, CISM, CGRC, CISA, or CompTIA Security+.
Responsibilities
- Serve as the VES System Steward within VA's ServiceNow Continuous Authorization and Monitoring (CAM) platform.
- Develop, maintain, and coordinate ATO authorization packages, including security controls, implementation statements, and supporting evidence.
- Support security authorization and continuous monitoring activities in accordance with FISMA, NIST SP 800-53 Rev. 5, and VA policies.
- Maintain and update security documentation, including the System Security Plan (SSP), Configuration Management Plan (CMP), Privacy Threshold Analysis (PTA), Privacy Impact Assessment (PIA), and other required artifacts.
- Coordinate vulnerability assessments, penetration testing, security control assessments, and remediation activities.
- Develop, maintain, and track Plans of Action and Milestones (POA&Ms), including remediation schedules and closure evidence.
- Coordinate with System Owners, ISSOs, Privacy Officers, technical teams, and VA cybersecurity stakeholders to address security and compliance requirements.
- Maintain system authorization boundary documentation, including minor applications, system interconnections, and security impact analyses.
- Monitor security risks, authorization milestones, and compliance activities, providing regular status reports to program leadership.
- Support security audits, assessments, and ongoing authorization activities to maintain the VES security posture.
Benefits
- Medical, dental, and vision coverage.
- Health Savings Account (when enrolled in an eligible plan) with company contribution.
- Company-paid life, accidental death, short-term disability, and long-term disability insurance.
- Voluntary accident, hospital indemnity, and critical care insurance.
- Voluntary medical and dependent care Flexible Spending Accounts.
- Accrued paid time off and company-paid holidays.
- 401(k) retirement plan with company match.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Mid Level
