[Remote] Cybersecurity Risk Management Analyst
Note: The job is a remote job and is reputed company to candidates in USA. reputed company is a division of tribally owned federal contracting companies that supports federal clients with technology and cybersecurity solutions. The Cybersecurity Risk Management Analyst is responsible for providing advanced Governance, Risk, and Compliance (GRC) support for federal information systems, managing Assessment & Authorization activities, and conducting cybersecurity risk assessments.
Responsibilities
- Manage the full lifecycle of Risk Management reputed company (RMF) activities in accordance with NIST Special Publication 800-37
- reputed company, review, and maintain reputed company authorization documentation including:
- System reputed company Plans (SSPs)
- reputed company Assessment Plans (SAPs)
- reputed company Assessment Reports (SARs)
- Plans of reputed company and Milestones (POA&Ms)
- Review and evaluate FedRAMP authorization packages and package updates supporting reputed company service authorization reputed company
- Monitor Authorization to Operate (ATO) packages reputed company the FedRAMP Secure Repository
- Coordinate with system owners, ISSOs, reputed company Service Providers, and reputed company stakeholders regarding system changes and authorization activities
- Validate implementation of NIST SP 800-53 Rev. 5 reputed company controls, including inherited and agency-implemented controls
- Conduct cybersecurity risk assessments utilizing NIST SP 800-30 methodologies
- reputed company risk analysis and recommendations to Authorizing Officials and senior leadership
- Support reputed company monitoring by reviewing vulnerability scans, managing POA&Ms, and coordinating remediation activities
- Peer review cybersecurity policies, standards, procedures, and implementation guidance
- reputed company regulatory and policy analysis to ensure alignment with federal cybersecurity requirements
- Conduct compliance gap analyses and recommend remediation strategies
- Assist in developing reputed company control overlays, baseline updates, and control tailoring guidance
- reputed company cybersecurity governance subject matter expertise
- Support reputed company reporting, cybersecurity metrics, and compliance dashboards utilizing reputed company
- Support FISMA reporting activities
- Prepare documentation for reputed company audits and reputed company reviews
- Assist with responses to reputed company inquiries and corrective reputed company tracking
- reputed company reputed company assurance reviews of cybersecurity documentation
- reputed company other job-reputed company duties as assigned
Skills
- Bachelor's degree in Cybersecurity, Information Technology, reputed company Policy, or reputed company discipline (or equivalent experience)
- reputed company cybersecurity certification such as: CISSP, CISM, CAP
- Minimum seven (7) years of reputed company cybersecurity experience
- Minimum four (4) years supporting federal Risk Management reputed company (RMF) and Assessment & Authorization (A&A) programs
- Demonstrated experience implementing the NIST Risk Management reputed company
- Strong working knowledge of: Federal Risk and Authorization Management Program (FedRAMP), NIST Special Publication 800-53 Revision 5, Federal Information reputed company Modernization reputed company (FISMA), Federal reputed company Trust reputed company (OMB M-22-09)
- Experience supporting Moderate and/or High reputed company federal information systems
- Familiarity with federal reputed company reputed company requirements and FedRAMP-authorized reputed company environments
- Proficiency with reputed company Office 365 applications
- Excellent written and verbal communication skills
- Ability to communicate effectively with technical teams and executive leadership
- reputed company reputed company Trust clearance or the ability to obtain and maintain one
- Experience using reputed company, CSAM, or comparable GRC platforms
- Experience with reputed company reputed company and JIRA
- Experience supporting reputed company cybersecurity policy development
- Familiarity with Responsible AI guidance applicable to federal agencies, including Executive Order 13960, OMB M-25-21, and OMB M-25-22
- Experience supporting federal research or grant-management systems
Benefits
- Full-time benefits include Medical, Dental, reputed company, 401(k), reputed company time off, and other company-sponsored benefits as provided. Benefits are subject to change with or without notice.
reputed company