RMF Continuity Management Analyst

Saliense • McLean, VA

14d

About The Position

The RMF Continuity Planning and Incident Response Analyst provides specialized support for continuity planning, disaster recovery, incident response preparedness, and RMF assessment readiness. The position works directly with system teams to develop, maintain, test, and validate contingency and incident response documentation, ensuring compliance with Federal and agency RMF requirements. The role coordinates continuity and incident response planning activities, facilitates exercises and training, and ensures required artifacts are completed and assessment-ready within established timelines.

Requirements

• Knowledge of NIST SP 800-53 security controls related to Contingency Planning (CP) and Incident Response (IR).
• Experience developing, reviewing, and testing ISCPs, IRPs, and Business Impact Analyses.
• Experience conducting tabletop exercises, functional exercises, disaster recovery tests, and incident response training activities.
• Familiarity with security authorization processes, assessment preparation, and compliance validation requirements.
• Ability to analyze continuity and incident response documentation and provide actionable recommendations for improvement.
• Strong technical writing, documentation, facilitation, and stakeholder coordination skills.

Responsibilities

• Support RMF continuous monitoring by ensuring continuity and incident response artifacts are complete, compliant, and available for review.
• Provide subject matter expertise to system teams developing and periodically updating Information System Continuity Plans (ISCPs) and Incident Response Plans (IRPs).
• Verify that ISCP, Business Impact Analysis (BIA), and IRP documentation is completed, updated, and finalized before scheduled annual system security assessments.
• Coordinate and conduct tabletop and functional exercises to validate contingency planning and incident response capabilities.
• Produce Test Plans and Results (TP&R), IRP tabletop exercise documentation, and finalized plans after exercises.
• Support the planning, coordination, and execution of incident response awareness and training activities.
• Maintain and provide weekly status reports on contingency plan tests, exercises, and incident response training activities.
• Develop draft and final After-Action Reports (AARs), lessons-learned documentation, and corrective action recommendations.

What This Job Offers

• Job Type: Full-time
• Education Level: No Education Listed