Security Compliance & Documentation Analyst

Aretum•McLean, VA

1d•Remote

About The Position

The Mid-Level Security Compliance & Documentation Analyst serves as an ISSO-aligned cybersecurity professional responsible for leading RMF, authorization, and compliance activities for complex, classified C5ISR and IIR mission systems. This role owns RMF package integrity, documentation quality, and authorization readiness while serving as a senior advisor to government stakeholders. Technical exposure may include select security tools or monitoring capabilities depending on the individual’s background, but the primary focus is governance, compliance, and documentation leadership. Due to the nature of our work as a federal consulting organization, employees may be expected to handle Controlled Unclassified Information (CUI) and must adhere to applicable safeguarding and compliance requirements.

Requirements

Master’s Degree + 5 years of relevant experience or Bachelor’s Degree + 8 years of relevant experience
3–6 years of experience in information assurance, cybersecurity, or compliance-focused roles
IAT Level III Certification: Must possess one of the following: CASP+ CE, CCNP Security+, CISA, CISSP, GCED, GCIH, or CCSP
Active Top Secret Clearance
Demonstrated experience maintaining and leading RMF packages in classified or regulated environments
Strong knowledge of NIST 800-series publications and DoD cybersecurity requirements
Proven experience developing SOPs, policies, and compliance documentation
Ability to communicate effectively with both technical and non-technical stakeholders
Demonstrated willingness to learn new tools/techniques and support cross-functional cybersecurity activities as mission needs evolve

Nice To Haves

Extensive knowledge of AWS Security
Experience supporting Department of War, DoD, or intelligence community mission systems
Familiarity with Zero Trust concepts and assessment efforts
Advanced certifications such as CAP, CISM, or CISSP
Experience with cross-domain solutions and interconnected system authorization

Responsibilities

Support and maintain development, maintenance, and oversight of RMF packages for classified C5ISR and IIR systems
Coordinate with Government System Owners, ISSOs, ISSEs, and Authorizing Officials to collect evidence, validate control implementation and maintain package accuracy.
Execute RMF support activities for ATO/IATT and continuous monitoring across multiple systems/enclaves, including documentation updates driven by engineering and operational changes.
Document and track POA&M items, support risk-based prioritization, and provide remediation status reporting through closure.
Validate documentation alignment with system architecture, interconnections, control inheritance, and mission dependencies.
Ensure systems comply with Department of War/DoD, and federal cybersecurity requirements
Support internal and external audits, inspections, and cybersecurity assessments
Monitor changes to cybersecurity policy and support implementation across supported systems
Provide compliance status, risk analysis, and authorization reporting to government leadership
Author, maintain, and approve cybersecurity SOPs, plans, and technical documentation
Standardized documentation practices across supported systems and teams
Ensure documentation supports audits, inspections, and operational continuity
Support cybersecurity risk management for C5ISR and IIR systems
Assess security impacts across enterprise, tactical, and mission networks
Support interconnected and cross-domain system authorization efforts