FISMA Support Analyst

Position Overview - Seeking FISMA Support Analysts to support the Governance, Risk & Compliance (GRC) team within the IT division at the Organization. The role supports FISMA compliance, NIST Risk Management Framework (RMF), security authorization, continuous monitoring, risk management, and security documentation across federal information systems.

Position Responsibilities

·        Manage system security authorization activities throughout the NIST RMF lifecycle.

·        Develop and maintain SSPs, SARs, POA&Ms, security documentation, and ATO packages.

·        Conduct security control assessments, risk assessments, vulnerability reviews, and continuous monitoring.

·        Track security weaknesses and recommend risk mitigation strategies.

·        Coordinate security scans, penetration testing, vulnerability remediation, and security reviews.

·        Review vulnerability results and support security incident investigations and security tool implementation.

·        Maintain security documentation, inventories, diagrams, metrics, and compliance records.

·        Coordinate with System Owners, Authorizing Officials, security teams, vendors, and technical stakeholders.

·        Provide security and compliance guidance to development and operations teams.

·        Support compliance with FISMA, NIST 800-53, NIST 800-37, NIST 800-171, and applicable agency policies.

Position Qualifications

·        Bachelor’s degree in Computer Science, Information Security, Cybersecurity, or related field.

·        3–5 years of information security or cybersecurity compliance experience.

·        Experience supporting federal government systems and FISMA compliance.

·        Hands-on experience with NIST RMF and ATO processes.

·        Strong knowledge of NIST 800-53, 800-37, and 800-171.

·        Experience with security assessment and vulnerability tools such as Nessus, ACAS, and SCAP.

·        Experience with Xacta or similar GRC/compliance platforms.

·        Understanding of cloud security and FedRAMP preferred.

·        Knowledge of security control implementation across diverse technology platforms.

·        Strong analytical, documentation, communication, and stakeholder-management skills.

 _____________________________________________________________________________

No Phone calls Please

Please apply with your resume in a word file including all your contact details