RMF/Assessment & Authorization (A&A) Analyst
About The Position
SkyePoint Decisions is seeking a RMF/Assessment & Authorization (A&A) Analyst to support the implementation and maintenance of the Risk Management Framework (RMF) for information systems and applications. The Analyst works closely with System Owners, Information System Security Officers (ISSOs), cybersecurity teams, and Government stakeholders to ensure systems achieve and maintain Authorization to Operate (ATO) status in compliance with Federal cybersecurity requirements. The position is responsible for developing and maintaining authorization documentation, supporting security assessments, tracking remediation activities, facilitating continuous monitoring activities, and contributing to ongoing cybersecurity compliance efforts. This position is fully remote.
Requirements
- Bachelor's degree in Cybersecurity, Computer Science, Information Systems, Information Assurance, or related discipline.
- Minimum 5 years of cybersecurity, information assurance, or RMF experience supporting Federal information systems.
- Experience supporting Assessment & Authorization (A&A) efforts and RMF processes.
- Familiarity with: NIST Risk Management Framework (SP 800-37), NIST SP 800-53 Rev. 5, and FISMA
- Experience preparing or maintaining security documentation and authorization artifacts.
- Strong analytical, organizational, and communication skills.
- U.S. Citizenship required.
- Ability to obtain and maintain a Public Trust.
Nice To Haves
- One or more of the following certifications: GCIH (GIAC Certified Incident Handler), ECIH (EC-Council Certified Incident Handler), Security+, CEH, CySA+, GCFA, CISSP, OSCP
- Experience supporting HHS or other Federal civilian agencies.
- Experience using governance, risk, and compliance (GRC) platforms such as eMASS, Xacta, Archer, or ServiceNow GRC.
- Experience supporting cloud-based environments (AWS, Azure, or GCP).
- Knowledge of Zero Trust Architecture, CDM, and FedRAMP requirements.
- Experience working in a FISMA-compliant environment.
Responsibilities
- Support development, maintenance, validation, and closure tracking of Plans of Action and Milestones (POA&Ms).
- Coordinate remediation tracking activities and validate corrective-action evidence supporting POA&M closure recommendations.
- Coordinate with Privacy Officials to support Privacy Threshold Analyses (PTAs), Privacy Impact Assessments (PIAs), and integration of privacy requirements into authorization activities.
- Support RMF activities across the system development lifecycle.
- Assist with system categorization, boundary definition, and security control implementation efforts.
- Maintain authorization documentation and supporting artifacts.
- Ensure security documentation remains current and compliant with applicable standards.
- Coordinate with stakeholders to collect and validate required security evidence.
- Develop, update, and maintain authorization package documentation.
- Assist in assembling complete authorization packages for review and approval.
- Support reauthorization and decommissioning activities.
- Participate in quality control reviews of security documentation.
- Work closely with ISSOs, System Owners, Security Engineers, Privacy Officials, and Program Management teams.
- Participate in authorization working groups and compliance meetings.
- Provide status updates and reporting to project leadership.
- Support cybersecurity awareness and compliance initiatives.
Benefits
- Certification incentive program
- PTO
- Floating federal holiday options
- Several insurance options including HMO and High Deductible plans with Health Savings Accounts [HSAs]
- Flex Spending Accounts [FSAs]
- Full Dental Plans
- Vision
- ST/LT Disability
- Life Insurance
- 401k matched
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Mid Level
