Cybersecurity Risk Management Analyst

Responsibilities: Manage the full lifecycle of RMF activities and A&A documentation for federal information systems. Provide GRC support, conduct risk assessments, and maintain continuous monitoring to ensure FISMA compliance.

Requirements: Requires a Bachelor's degree, a professional certification (CISSP, CISM, or CAP), and at least seven years of cybersecurity experience. Must have four years of experience with federal RMF/A&A programs and the ability to obtain a Public Trust clearance.

Key skills: NIST Risk Management Framework, FedRAMP, FISMA, Assessment & Authorization, Cybersecurity Risk Assessment, Governance Risk & Compliance, Security Control Validation, Technical Documentation, Stakeholder Engagement, Vulnerability Management, Policy Analysis, ServiceNow, Compliance Auditing, Zero Trust Strategy, Quality Assurance, Risk Analysis

Keywords: NIST SP 800-37, NIST SP 800-53 Rev. 5, NIST SP 800-30, FedRAMP, FISMA, A&A, ATO, SSP, SAP, SAR, POA&M, GRC, CISSP, CISM, CAP, ServiceNow, CSAM, Confluence, JIRA, Zero Trust, OMB M-22-09, Public Trust Clearance, Cybersecurity Governance, Risk Management, Federal Compliance, Cloud Security, Responsible AI, Executive Order 13960, OMB M-25-21, OMB M-25-22