RMF/Assessment & Authorization (A&A) Analyst
$115k - $135kSocket.dev
SkyePoint Decisions is a leading Cybersecurity Architecture and Engineering, Critical Infrastructure and Operations, and Applications Development and Maintenance IT service provider headquartered in Dulles, Virginia with operations across the U.S. We provide innovative enterprise-wide solutions as well as targeted services addressing the complex challenges faced by our federal government clients. Our focus is on enabling our clients to deliver their mission most efficiently and effectively – anytime, anywhere, securely. We combine technical expertise, mission awareness, and an empowered workforce to produce meaningful results. This is a contingent position based on contract win. SkyePoint Decisions is seeking a RMF/Assessment & Authorization (A&A) Analyst tosupport the implementation and maintenance of the Risk Management Framework (RMF) for information systems and applications. The Analyst works closely with System Owners, Information System Security Officers (ISSOs), cybersecurity teams, and Government stakeholders to ensure systems achieve and maintain Authorization to Operate (ATO) status in compliance with Federal cybersecurity requirements. The position is responsible for developing and maintaining authorization documentation, supporting security assessments, tracking remediation activities, facilitating continuous monitoring activities, and contributing to ongoing cybersecurity compliance efforts. This position is fully remote. Responsibilities: Support development, maintenance, validation, and closure tracking of Plans of Action and Milestones (POA&Ms). Coordinate remediation tracking activities and validate corrective-action evidence supporting POA&Ms closure recommendations. Coordinate with Privacy Officials to support Privacy Threshold Analyses (PTAs), Privacy Impact Assessments (PIAs), and integration of privacy requirements into authorization activities. Support RMF activities across the system development lifecycle. Assist with system categorization, boundary definition, and security control implementation efforts. Maintain authorization documentation and supporting artifacts. Ensure security documentation remains current and compliant with applicable standards. Coordinate with stakeholders to collect and validate required security evidence. Develop, update, and maintain authorization package documentation. Assist in assembling complete authorization packages for review and approval. Support reauthorization and decommissioning activities. Participate in quality control reviews of security documentation. Work closely with ISSOs, System Owners, Security Engineers, Privacy Officials, and Program Management teams. Participate in authorization working groups and compliance meetings. Provide status updates and reporting to project leadership. Support cybersecurity awareness and compliance initiatives. Required Qualifications: Bachelor's degree in Cybersecurity, Computer Science, Information Systems, Information Assurance, or related discipline. Minimum 5 years of cybersecurity, information assurance, or RMF experience supporting Federal information systems. Experience supporting Assessment & Authorization (A&A) efforts and RMF processes. Familiarity with: NIST Risk Management Framework (SP 800-37), NIST SP 800-53 Rev. 5, and FISMA Experience preparing or maintaining security documentation and authorization artifacts. Strong analytical, organizational, and communication skills. U.S. Citizenship required. Ability to obtain and maintain a Public Trust. Preferred Qualifications: One or more of the following certifications: GCIH (GIAC Certified Incident Handler) ECIH (EC-Council Certified Incident Handler) Security+ CEH CySA+ GCFA
CISSP
OSCP Experience supporting HHS or other Federal civilian agencies. Experience using governance, risk, and compliance (GRC) platforms such as eMASS, Xacta, Archer, or ServiceNow GRC. Experience supporting cloud-based environments (AWS, Azure, or GCP). Knowledge of Zero Trust Architecture, CDM, and FedRAMP requirements. Experience working in a FISMA-compliant environment. Compensation: Salary Range: $115,000 - $135,000 The SkyePoint Decisions salary range for this position is a general guideline only. It represents an estimated range for this position and is just one piece of our total compensation package. Salary at SkyePoint is determined by various factors, including but not limited to location, work schedule, the candidate’s combination of education, knowledge, skills, competencies, and experience, as well as contract-specific affordability, market data and business considerations. In addition to a competitive salary, SkyePoint offers benefits including a certification incentive program, PTO, floating federal holiday options, several insurance options including HMO and High Deductible plans with Health Savings Accounts [HSAs], Flex Spending Accounts [FSAs], Full Dental Plans, Vision, ST/LT Disability, Life Insurance, and 401k matched. What We Can Offer You: At SkyePoint, we go B.I.G. (beginning in GRATITUDE) by recognizing all we have and giving back to our employees, families, and communities. It instills a positive mindset that permeates all we do. By beginning in gratitude, SkyePoint can continue to spread living in gratitude each day. Great Benefits: Several insurance options including HMO and High Deductible plans with Health Savings Accounts [HSAs], Flex Spending Accounts [FSAs], Full Dental Plans, ST/LT Disability, Life Insurance, floating federal holiday options, and 401k matched Certificate Incentive Program: To promote professional development, we recognize and reward employees who obtain new certifications aligned with business needs. Flexible Work Environment SkyePoint Decisions is an established ISO 9001:2015 and ISO/IEC 27001:2013 certified small business and appraised at CMMI Level 3 for Services and Development. We possess a common vision of excellence and foster a collaborative team culture built upon individual performance and accountability. We invest in our people and systems to create value for our clients. It is the SkyePoint Way. We are grateful for the opportunity to work with exceptional people and give back to the communities we serve. Our employees value the flexibility at SkyePoint that allows them to balance quality work and their personal lives. SkyePoint Decisions is a participating E-Verify Employer. U.S. Citizenship is required for most positions. Equal Opportunity Employer/Veterans/Disabled. CCPA Disclosure Notice Here #J-18808-Ljbffr Socket.dev- SkyePoint Decisions is seeking an RMF/Assessment & Authorization (A&A) Analyst to support the implementation and maintenance of the RMF for information systems and applications. The Analyst works closely with System Owners, ISSOs, cybersecurity teams, and Government stakeholders...SuggestedRemote job
- SkyePoint Decisions is seeking an RMF/Assessment & Authorization (A&A) Analyst to support the implementation and maintenance of the RMF for information systems and applications. You will work with System Owners, ISSOs, cybersecurity teams, and Government stakeholders to...SuggestedRemote job
- ...located in McLean, Virginia, is looking for an RMF / A&A Technical Consultant to execute cybersecurity authorization and compliance activities. The role entails developing... ..., supporting audits, and performing risk assessments in cloud and enterprise systems. Ideal...Suggested
- Amentum is seeking a Cybersecurity Analyst to support our McLean, VA customer, focusing on RMF-based assessment and authorization for a federal civilian agency. The role develops... ...policy and RMF/NIST controls, with hands-on A&A experience and a TS clearance with...Suggested
- ...Description Job Title: Cyber & A&A Security Specialist... ...least 5 years of performing assessments of Federal Information Systems... ...Security Control Assessments and Authorization (A&A) activities for NWS FIPS... ...NIST Risk Management Framework (RMF), NWS policy, NOAA, and DOC...SuggestedTemporary workRemote work
- ...Bethesda, Maryland is seeking a mid-level RMF IT Security Analyst to support RMF lifecycle activities, security assessments, continuous monitoring, and compliance initiatives... ...involves developing SSPs, SARs, POA&Ms, and authorization packages while #J-18808-Ljbffr System OneRemote job
- Job Title: RMF IT Security Analyst Location: Bethesda, Maryland Type: Direct Hire / Perm Work Model... ...RMF lifecycle activities, security assessments, continuous monitoring, and... ...documentation including SSPs, SARs, POA&Ms, and authorization packages. Support system...Permanent employmentLocal areaRemote work
$99k - $225k
...infrastructure and personnel dynamics to assess the full threat landscape. From there,... ...experience in cybersecurity and Assessment and Authorization (A&A) supporting DoD environmentsExperience... ...or DoD ATO packages, performing A&A and RMF, and conducting risk assessments for...Full timeContract workPart timeFor contractorsWork at officeLocal areaRemote work- ...Description Job Description A&A AnalystLocation:... ...is seeking an A&A Analyst to support cybersecurity... ...and associated RMF artifacts.Maintain SSPs... ...compliance stakeholders.Track assessment status, open findings,... ...package updates, and authorization boundary...Contract workFor contractors
- ...Title: Senior Cyber-Security Analyst / Navy Validator... ...Research (ONR) in the area of Assessment and Authorization of ONR systems and networks.... ...Risk Management Framework (RMF) Implementation Plan IAW DODI... ...Assessment and Authorization (A&A) Process (RMF) Ensures current...For contractorsWork at officeLocal areaImmediate start
- ...Job Type: Full Time Location: Columbia, Md. Clearance: TS/SCI w/Polygraph VMR Strategic Solutions is seeking an RMF/Security Assessment. Are you interested in joining a dynamic team responsible for supporting USCYBERCOM’s internal command IT systems, as well...Full timeShift work
- Amentum is seeking a Cybersecurity Analyst to support a McLean, VA based federal civilian agency as a contractor. The role focuses on RMF/A&A activities, developing SSPs, POA&Ms, SARs, and related RMF artifacts, with emphasis on risk analysis and security documentation...Civilian Contractor
- General Dynamics - IT seeks a Cyber Analyst Principal for a critical contract role on a commercial... ...5+ years in information security, deep RMF knowledge, and hands-on experience with... ...-domain solutions, and security control assessment, with the ability to present risk to...Full timeContract work
$110k - $130k
...Vulnerability Management Analyst to support a cybersecurity... ...owners, security engineers, RMF personnel, and operational... ...are properly assessed, prioritized, remediated,... .... Collaborate with RMF/A&A teams to support Authorization to Operate (ATO) activities...Contract workRemote work$38 - $42 per hour
...Information Assurance Analyst / Engineer Razor is looking... ...specific work authorizations; inquire within. The... ...perform tasks related to A&A to ensure assigned information... ...lead teams to conduct assessments of information systems... ...VA Cyber Security and RMF process....Long term contractContract workRemote work- ...timeDescriptionClient Solution Architects (CSA) is currently seeking an Analyst I to support onsite in the Arlington, VA area.For... ..., including preparation of Risk Management Framework (RMF) Assessment and Authorization (A&A) packages and Enterprise Privacy Inspection Reports in...Contract workFor subcontractorWork at officeRemote work
- Kingfisher Systems, Inc. seeks a Principal Information Assurance Analyst to support the Headquarters Department of the Army ODCS... ...environments. The successful candidate will manage RMF processes, prepare authorization packages, and ensure compliance with DoD 8510.01, ICD 50...
$104k - $166k
...The Vulnerability Management Analyst will support the Federal Aviation... .... Validate findings, assess severity and risk impact, and... ...management. Participate in ATO (Authorization to Operate) and continuous... ...monitoring activities within the RMF process. Continuous...Contract workLocal areaRemote workShift work$115k - $131k
...Vulnerability Management Analyst to support the NIH cybersecurity... ..., security engineers, RMF personnel, and operational... ...are properly assessed, prioritized, remediated,... .... Collaborate with RMF/A&A teams to support Authorization to Operate (ATO) activities...Contract workLocal areaFlexible hours$78.9k - $123.3k
...compliance professional to support system authorization and continuous monitoring activities... ...will have experience working with NIST RMF, NIST SP 800-53 controls, security authorization... ...working with technical teams to assess control implementation, identify compliance...Permanent employmentFull timePart timeWork at officeLocal areaRemote work- Senior Information Assurance (IA) Lead Analyst VOR Technology is a privately held,... ...skills in Certification & Accreditation / Assessment & Authorization (C&A/A&A). Responsibilities Provide DoD IA... ...Manager Executing C&A/A&A within DoD RMF (DoD 8500, DoD 8510, NIST 800-37/-53)...Local area
$100k - $140k
...Position: Operations Research and Industrial Engineering Analyst, Senior - FAA Function: Operations Research, Industrial... ...include but are not limited to: Update and create Assessment and Authorization (A&A) documentation to support FAA’s ATO processes. Conduct...Local areaRemote work$180k - $200k
...currently seeking an Operations Research Analyst SME. This position is a full-time... ...analyzing data from all test phases to assess Critical Operating Issues, systems under... ...statement herein is intended to imply any authorities to commit Battelle unless special written...Full timeTemporary workWork experience placementWork at officeLocal areaRemote workFlexible hours- ...makpar.com/careers . The Senior Information Security Analyst will perform the core cybersecurity assessment and compliance work for IRS Safeguards. The role... ...5, CIS Benchmarks, DISA STIGs, FIPS, OMB A-130, and RMF guidance. Required Qualifications • High school...Full timeStart working todayFlexible hours
- ...Description Information Security Analyst Duties and Responsibilities:... ...Conduct vulnerability assessments and implement remediations aligned... ...pipelines Support Authority to Operate (ATO) processes by... ...Patching, eMASS, and related RMF tools Cybersecurity, Systems...Remote work3 days per week
$100k - $120k
...runs on, and setting the standards other analysts follow. You'll operate with significant... ...Proven ability to independently source, assess, and prioritize data and competing asks... ...government with your Form I-9 information to confirm that you are authorized to work in the U.S....Shift work$99k - $225k
...designing and modernizing workflows for authorization, POA&M tracking, and audit evidence collection... ...Security Plan (SSP) development, risk assessment, and control mapping processesExperience... ...related SPs, Risk Management Framework (RMF), Federal Information Processing...Full timeContract workPart timeWork at officeLocal areaRemote work- ...Information Assurance Support Analyst LOCATION: Rockville, MD... ...Experience reviewing FedRAMP authorization packages and understanding how... ...systems through the Security Assessment & Authorization (SA&A) Assess... ...Risk Management Framework (RMF). This includes security categorizations...Full timeContract workWork at office
$340 per month
Missile Defense and Space Systems Research Analyst OverviewApply your analytical skills to... ...the Department of War’s operational assessment of missile defense and space systems. As... ...firsthand system knowledge.High-Level Briefing: Author written reports and deliver oral...Local areaRelocation packageFlexible hours$140k
DescriptionInformation Security Analyst III - Q Clearance RequiredSummary:We are seeking an experienced Information Security Analyst III to support the security, assessment, authorization, and continuous monitoring of government systems and information assets. The ideal...
Do you want to receive more vacancies?
Subscribe and receive similar vacancies to RMF/Assessment & Authorization (A&A) Analyst. Be the first to apply!
- review analyst Bethesda, MD
- design analyst Bethesda, MD
- health program analyst Bethesda, MD
- recruiting analyst Bethesda, MD
- hospitality analyst Bethesda, MD
- collection analyst Bethesda, MD
- incident response analyst Bethesda, MD
- document analyst Bethesda, MD
- travel analyst Bethesda, MD
- contracts analyst Bethesda, MD



