FCC - Security Compliance / RMF Analyst

cFocus Software Incorporated • Washington, DC

2d • Remote

About The Position

cFocus Software is seeking a Security Compliance / RMF Analyst to join our program supporting the Federal Communications Commission (FCC). This position is remote and requires the ability to obtain a Public Trust clearance.

Requirements

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or related field (or equivalent experience).
• Experience in cybersecurity compliance, RMF, risk management, or related environments.
• Demonstrated experience supporting enterprise-level cybersecurity or compliance programs.
• Experience working in complex IT environments with federal or regulated systems.
• Strong knowledge of NIST RMF (SP 800-37) and NIST SP 800-53 controls.
• Experience with A&A, ATO processes, and continuous monitoring.
• Familiarity with GRC tools (e.g., Archer, Xacta, CSAM).
• Experience with vulnerability management and risk prioritization.
• Strong documentation and technical writing skills.
• Analytical and problem-solving capabilities.
• Ability to communicate effectively with technical and non-technical stakeholders.
• Role-appropriate cybersecurity certification demonstrating competency in compliance, RMF, or risk management (e.g., Security+, CISA, CISSP, or equivalent).

Responsibilities

• Support RMF lifecycle activities including system authorization, reauthorization, and continuous monitoring.
• Develop, maintain, and update security documentation (SSPs, SARs, POA&Ms, contingency plans).
• Perform security control assessments (SCA) and control validation activities.
• Track and manage POA&Ms, vulnerabilities, and remediation activities.
• Conduct risk assessments, gap analyses, and compliance reviews.
• Support FISMA, NIST SP 800-53, and other federal compliance requirements.
• Coordinate with system owners, ISSOs, engineers, and auditors.
• Support audit readiness and respond to internal/external audit requests.
• Maintain RMF artifacts in GRC tools (e.g., Xacta, Archer, ServiceNow).
• Assist with continuous monitoring, reporting, and compliance metrics development.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level