FISMA Support Analyst

Edgewater Federal Solutions, Inc.•Washington, DC

5d•Onsite

About The Position

We are seeking FISMA Support Analyst(s) to support the Governance, Risk and Compliance (GRC) team within the IT division at the Board of Governors of the Federal Reserve. This team is responsible for defining, implementing, and managing processes that support compliance, policy, outreach, and privacy-related work across the organization.

Requirements

U.S. Citizenship
Bachelor’s degree in Computer Science, Information Security, or a related field
Three to five years of experience in information security or cybersecurity compliance
Experience with federal government systems and FISMA compliance
Strong knowledge of NIST frameworks, including SP 800-53, SP 800-37, and SP 800-171
Familiarity with security assessment tools such as Nessus, ACAS, and SCAP
Understanding of cloud security
Experience with compliance management tools such as Xacta or similar platforms
Knowledge of security control implementation across various platforms
Hands-on experience with Risk Management Framework (RMF) and Authority to Operate (ATO) processes

Nice To Haves

FedRAMP experience is preferred

Responsibilities

Manage the security authorization lifecycle for information systems under NIST RMF (SP 800-37)
Prepare and maintain security authorization packages, including System Security Plans, Security Assessment Reports, and Plans of Action and Milestones
Conduct continuous monitoring activities and maintain Authority to Operate status
Ensure compliance with FISMA, NIST SP 800-53 security controls, and agency-specific policies
Perform security control assessments and vulnerability analyses
Identify, document, and track security weaknesses and deficiencies
Develop and maintain Plans of Action and Milestones (POA&Ms)
Conduct risk assessments and recommend risk-mitigation strategies
Support annual security reviews and security authorization updates
Develop and maintain System Security Plans (SSPs)
Create and update security-related documentation, including standard operating procedures, diagrams, and inventories
Generate security metrics and reports for management and auditors
Maintain system security authorization documentation in compliance repositories
Coordinate security scans and penetration-testing activities
Review and analyze vulnerability scan results
Assist with incident response and security event investigations
Support security tool implementation and configuration
Serve as the primary liaison among system owners, authorizing officials, and security teams
Coordinate with vendors, contractors, and technical teams on security requirements
Provide security guidance to development and operations teams