Security Analyst - Risk Management Framework (RMF) / Assessment & Authorization

WINTrio, LLC

Security Analyst – Risk Management Framework (RMF) / Assessment & AuthorizationRemote with Hybrid Work in Maryland · Full Time**Position Title:** Security Analyst – Risk Management Framework (RMF) / Assessment & Authorization**Location:** Remote with Hybrid Work in Maryland **Citizenship:** U.S. Citizenship required **Employment Type:** Full-Time**How to Apply****Email your resume:** View email address on click.appcast.io**Position Overview**WINTrio is seeking an experienced Security Analyst with strong Risk Management Framework (RMF), Assessment & Authorization (A&A), and Authority to Operate (ATO) experience to support USDA information systems.The position requires hands-on experience developing and maintaining Federal RMF/A&A packages and working with NIST and agency security requirements. USDA RMF and USDA CSAM experience are highly desirable.**Key Responsibilities*** Collect, review, and update system information.* Create and maintain system records in Cybersecurity Assessment and Management System (CSAM).* Develop/update and upload Privacy Threshold Analyses (PTAs).* Perform and document system security categorization.* Develop/update Privacy Impact Assessments (PIAs).* Develop/update E-Authentication Risk Assessments.* Maintain system identification information and system/technical narratives within CSAM.* Identify common and inherited security controls.* Develop and maintain compliance descriptions for security controls.* Support security-control tailoring.* Develop compensating controls where required.* Develop/update: + Contingency Plans (CP) + CP test, training, and exercise documentation + System of Records Notices (SORN) + Configuration Management Plans (CMP) + Incident Response Plans (IRP) + Business Impact Assessments (BIA) + Interconnection Security Agreements (ISA)* Finalize System Security Plan (SSP) compliance descriptions.* Finalize Contingency Plans.* Finalize CMPs, IRPs, and Disaster Recovery Plans where applicable.* Review RMF packages for completeness and readiness.* Assist USDA REE stakeholders in resolving findings and updating documentation during concurrence review.**Required Qualifications*** Working knowledge of: + NIST Risk Management Framework + FIPS PUB 199 + NIST SP 800-53 Rev. 4/5 + NIST SP 800-37 Rev. 2 + NIST SP 800-171 Rev. 2 + NIST SP 800-47 Rev. 1* Experience developing security-control implementation/compliance descriptions.* Experience developing Federal security and authorization documentation such as SSPs, CPs, CMPs, IRPs, BIAs, PIAs, ISAs, and related RMF artifacts.* Experience using CSAM or a comparable Federal governance, risk, and compliance/RMF system.* Experience completing all aspects of the NIST RMF process.* Ability to work collaboratively with system owners, ISSOs/ISSMs, technical teams, privacy personnel, and Government security stakeholders.* Strong technical writing, documentation, analytical, and quality-assurance skills.* Must be able to satisfy applicable background investigation/Public Trust, HSPD-12, PIV, and facility/system access requirements.**Highly Desired Qualifications*** Previous experience supporting USDA RMF programs.* Working knowledge of: + USDA Risk Management Framework 2.0 + USDA Six-Step RMF Process + USDA Departmental Regulation 3540-003, Security Assessment and Authorization + USDA POA&M procedures* Hands-on experience with the USDA CSAM instance.* Previous USDA or other Federal civilian agency cybersecurity experience.* Experience obtaining ATOs for FedRAMP products, platforms, or solutions.* Experience supporting FISMA-regulated Federal systems.* Prior participation in similar Federal RMF/A&A projects.**Work Environment*** Full-time position.* Primarily remote within the United States.* Occasional on-site support may be requested in the Washington, DC / Northern Virginia area.* Standard Federal business hours.* All work must be performed within the United States.**WINTrio Benefits*** Healthcare, Medical, Dental, and Vision* FSA and HSA options* 401(k) Retirement Plan* Annual Bonus and Profit Sharing Opportunities* Paid Time Off* Employee Assistance Program* Life and Disability Insurance**Equal Opportunity Employer**WINTrio LLC is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to any characteristic protected by applicable law.Apply Now
J-18808-Ljbffr WINTrio, LLC

Vacancy posted 1 day ago

Similar jobs that could be interesting for youBased on the Security Analyst - Risk Management Framework (RMF) / Assessment & Authorization in Brooklyn, NY vacancy

Senior Security Analyst: Assurance and Global Compliance
$178.2k - $258k
...for a **Senior Security Analyst** to help define... ...into practical frameworks, tools, reviews,... ...and compliance assessments, readiness reviews... ...required U.S. export authorizations. #LI-MD1### ## *... .../open-source risk, and evidence... ...testing, or evidence-management tools; relevant...
Suggested
Jobleads-US
Brooklyn, NY
2 days ago
Red Team - Offensive Security Analyst - Manager
$128.1k - $239.6k
...all of whom rely on secure technology to be... ...and mitigates cyber-risk, protecting EY and... ...our information management systems. The opportunityThe... ...an Active Defense Analyst with a strong... ...narratives, risk assessments, and remediation... ...-control channel frameworks, data obfuscation/...
Suggested
Summer holiday
Local area
Remote work
Flexible hours
Night shift
Weekend work
EY (Ernst & Young)
Hoboken, NJ
16 hours ago
Adaptive Security Testing Support, Analyst
$90k - $123k
...infrastructure to improve our overall security posture. In addition, you... ...requests, and change management submissions, following established... ...and consistency of security assessment outputs, including reports... ...Industry Regulatory Authority (FINRA) and the National Futures...
Suggested
Full time
Work experience placement
Work at office
Local area
Remote work
1 day per week
MUFG Bank, Ltd.
Jersey City, NJ
18 days ago
Third Party & Vendor Risk Specialist
...third-party / vendor risk management program, as an individual... ..., Legal, Information Security, and Compliance. It... ...issues within authority, and escalates higher... ...inventory and risk tiering framework; conducts risk-based... ...relationship. Supports assessment of fourth party (...
Suggested
Contract work
For subcontractor
Gosunward
Brooklyn, NY
4 days ago
Security Administration Analyst with Sailpoint and ServiceNow- NJ - RTH- USC and GC only
$35 per hour
...****@*****.*** Security Admin with ServiceNow and... ...Security Administration Analyst is responsible for executing access management activities, resolving... ...the business purpose, risk, and impact of access requests... ...your resume, you authorize Yoh to review and reformat...
Suggested
Contract work
Shift work
Yoh, A Day & Zimmermann Company
Jersey City, NJ
1 day ago
Data Security Specialist, VP
$121 - $194 per hour
...experience in data security and protectionMust... ...Data Security Posture Management (DSPM), including the assessment, management, and... ...mitigating data security risks through continuous... ...and cybersecurity frameworks and advising on... ...Industry Regulatory Authority (FINRA) and the National...
Full time
Work at office
Local area
Remote work
1 day per week
MUFG
Jersey City, NJ
16 hours ago
Information Security Analyst
...DescriptionStrong knowledge of Information Security concepts such as:•Encryption,... ...Prevention tools and solutions•Risk-Threat Analysis and Vulnerability Assessments•Enterprise Security Monitoring,... ...(RBAC)•Identity and Access Management, Computer Forensic•IT Audit and Compliance...
Roljobs Technology Services
Jersey City, NJ
3 days ago
Head of Information Security
$220k - $250k
...Head of Information Security is responsible... ...strategy execution, risk management, and regulatory... ...developments; assess risk exposure and... ..., and recognized frameworks such as NIST CSF,... ...there is no direct authority. Ability to propose... ...such as NIST AI RMF, preferred....
Flexible hours
Help At Home, LLC
Brooklyn, NY
16 hours ago
Technology Risk Management - Control Officer; VP
$135k - $192k
...Summary: Technology Risk Management Control Officer will... ...Responsibilities: Assessment of processes, risks,... ...s best practices and frameworks such as: Committee of... ...application development, secure by design, and system... ...Industry Regulatory Authority (FINRA) and the...
Full time
Work at office
Local area
Remote work
1 day per week
MUFG Bank, Ltd.
Jersey City, NJ
20 days ago
Remote Actuary / Actuarial
...the nation, we offer risk financing solutions in... ...sponsorship. Applicants must be authorized to work in the United... ...for an Actuarial Analyst to join their team.... ...models to support risk assessment and pricing strategies... ...while learning key frameworks and practices.* May identify...
Full time
Part time
Seasonal work
Live out
Work at office
Remote work
Great American Insurance Group
Brooklyn, NY
4 days ago
Senior Firewall Security Analyst
$65 - $75 per hour
Back Senior Firewall Security Analyst Infrastructure & Security Allentown , Pennsylvania... ..., including reviewing and assessing firewall rules for security risks and compliance. The role involves... ...firewalls. Hands-on experience managing Palo Alto Panorama for centralized...
Full time
Contract work
Work experience placement
Remote work
Shift work
CEI
Brooklyn, NY
4 days ago
Security Administration Analyst - IAM
...Description Job Title: Security Administration Analyst – IAM Location: Jersey... ...Administration Analyst for access management at a financial services... ...the business purpose and risk of the access. Handle... .... ~ Must be legally authorized to work in the United States...
Contract work
Shift work
ZipStaff Inc.
Jersey City, NJ
17 days ago
Junior Analyst, Risk Management
## Junior Analyst, Risk ManagementApply: Ft. Lauderdale: Full time: Posted Yesterday: R-10... ...hospitality.* **Job Summar**y The Jr. Risk Management Analyst will be an integral part of a... ...for insurance renewals, audits, risk assessments, and ad hoc inquiries.* Coordinate...
Full time
Work at office
Local area
Flexible hours
The Ritz-Carlton Yacht Collection
Brooklyn, NY
1 day ago
Operational Risk Specialist
$20 - $27 per hour
...Objective The Operational Risk Specialist supports... ...’s operational risk management program, with primary... ...with operational risk assessments, incident reporting, control... ...agencies, and other authorized parties, clarifying... ...guidance. Prepare and securely transmit accurate, complete...
Hourly pay
Work at office
Local area
Remote work
Burke & Herbert Bank
Brooklyn, NY
4 days ago
Analyst I, IT Risk Management
## Analyst I, IT Risk ManagementPostuler: Conshohocken, PA: Temps Plein:... ...foundational technology risk assessments and internal compliance... ...tracking of organizational security postures. Coordinates with... ...Collaborates with senior risk management personnel to track the progress...
Temporary work
Local area
MWI Animal Health
Brooklyn, NY
2 days ago
Insurance actuary
...methodologies, analyze emerging risks, and support... ...projects, contribute to secure regulatory filings, and... ...Journal as one of the Best-Managed Companies and by Forbes... ...excess and surplus to assess and price risk with... ...customersInteract with regulatory authorities to support filings of...
Verisk Analytics
Jersey City, NJ
4 days ago
Senior Actuarial Advisor - Commercial Liability
...productsInteract with regulatory authorities to support filings of loss... ...to make better decisions on risk, faster.At Verisk, you'll have... ...Journal as one of the Best-Managed Companies and by Forbes as a... ...liability, and excess and surplus to assess and price risk with speed and...
Work at office
Verisk Analytics
Jersey City, NJ
1 day ago
Head of Security
...Security and trust are fundamental to Medplum. We... ...customer security, and risk management. One day you might be reviewing the authorization model for a new platform... ...a customer security assessment, working with an... ...security and compliance frameworks. Experience with AWS...
Flexible hours
Medplum
Brooklyn, NY
3 days ago
Associate Actuarial Consultant - Commercial Property
...address new and emerging insurance risks, influence market‑leading... ..., and support customers in managing increasingly complex exposures... ..., and excess and surplus to assess and price risk with speed and... ...customersInteract with regulatory authorities to support new/enhanced...
Verisk Analytics
Jersey City, NJ
1 day ago
Associate Actuary - North America Property Pricing
$120k - $150k
...the way we help customers to manage risk. Join us as a... ...and reserving actuaries in assessing the impact of loss trends and... ...insureds, aligning the pricing framework across the different underwriting... ...health, wellbeing and financial security—as well as your professional...
Full time
Work at office
American International Group (AIG)
Jersey City, NJ
1 day ago
Senior GRC Analyst
$180.57k - $224.31k
...member of the Roblox Security Governance, Risk, and Compliance (... ...scalable method of assessing and quantifying risk... ...quantitative risk management methodologies, including... ..., compliance frameworks, creation of policy... ...United States work authorization related to certain...
Full time
Work experience placement
H1b
Work at office
Local area
Visa sponsorship
Monday to Friday
Flexible hours
VulnU
Brooklyn, NY
2 days ago
Risk and Issue Management Analyst
## Risk and Issue Management AnalystApply: This is a hybrid position, both in-... ...Risk and Issue Management Analyst**Number of Positions:**1**... ...identification and impact assessment through root cause analysis... ...; knowledge of regulatory frameworks relevant to our industry (...
Full time
Work at office
Local area
Remote work
Deltadentalmi
Brooklyn, NY
2 days ago
Insurance Analyst II, State Product Management
...insurer, is hiring for an Insurance Analyst II, State Product Management in the Eastern State Product... ...profitability targets. Proactively assesses market risks and opportunities, evaluating... ...qualified individuals. Must have authorization to work indefinitely in the US....
Work at office
Remote work
CSAA Insurance Group, a AAA Insurer
Brooklyn, NY
6 hours ago
Intern - Security Analyst
$18 per hour
## Intern - Security AnalystApply: St. Louis, MO: Full time: Posted 3 Days Ago: End... ...eligibility requirements.***Intern - Security Analyst****St. Louis, MO****Rate of Pay: $18... ...across areas such as vulnerability management, third-party risk, governance, policy development, and...
Full time
Contract work
Temporary work
Summer work
Internship
Work at office
Local area
Monday to Friday
Flexible hours
Midland States Bancorp, Inc.
Brooklyn, NY
2 days ago
Senior Security and Compliance Specialist
$150k - $170k
...available. Senior Security and Compliance... ...design, product management, and technology,... ...supporting security, risk management, and regulatory... ...Risk Management Framework (RMF), Federal... ...delivery. Support Authorization to Operate (ATO)... ...reviewing technical assessments and participating...
Remote work
Flexible hours
Ad Hoc LLC
Brooklyn, NY
2 days ago
Junior Financial Risk & Internal Controls Analyst
Montcure LLC is seeking a Jr. Financial Management Analyst - Risk Management & Internal Controls in Falls Church, VA. The role focuses on ULO analysis, DAR-Q compliance, and supporting audit readiness to improve financial statement accuracy. Required is a Bachelor’s degree...
Montcure LLC
Brooklyn, NY
4 days ago
Executive Director, Security & Safety Strategy
$130k - $175k
...Senior Director, Security and Safety Employee... ...subordinate management tiers, pioneering... ...managing enterprise risks. Additionally, the... ...risk management framework; continuously forecast... ...Compliance: Author, formalize, and mandate... ...vulnerability assessments to continuously...
Full time
Contract work
Work at office
Local area
Work from home
Shift work
New York Racing Association
Elmont, NY
2 days ago
Compliance and Ops Risk Test Lead - Senior Associate
...Compliance and Operations Risk Test Lead Join our dynamic team... ...and operational risk management. Your expertise in test execution... ...cohesive and efficient testing framework, contributing to the seamless... ...~ Proven ability to perform assessments of the control environment, identifying...
Chase
Jersey City, NJ
2 days ago
Securities Services Ops Analyst - Hybrid Back-Office Specialist
...Corporation in Delaware's Wilmington area is seeking a Securities Services Operations Analyst to join the Income Team within our Shared Services division... ...while collaborating with the Corporate Actions Team to manage events and #J-18808-Ljbffr UMB Financial Corporation
UMB Financial Corporation
Brooklyn, NY
2 days ago
Entry-Level Security & Derivatives Processing Analyst
Citi's Securities and Derivatives Processing team in Tampa, FL is seeking a Security and Derivatives Intermediate Associate Analyst. This entry-level role supports trade processing, settlement, and investigations across desks and branches, ensuring accuracy and compliance...
VulnU
Brooklyn, NY
2 days ago

Do you want to receive more vacancies?

Subscribe and receive similar vacancies to Security Analyst - Risk Management Framework (RMF) / Assessment & Authorization. Be the first to apply!