Cyber Risk & Compliance Analyst - RMF/NIST Specialist

Edgewater Federal Solutions, Inc.; Albuquerque (NM); On-site; USD 90,000 - 120,000; Full time

Job summary

Edgewater Federal Solutions is seeking a Cyber Risk and Assessment Analyst to support the Agency’s IT and cybersecurity compliance program by assessing risk, maintaining audit-ready documentation, and tracking corrective actions to closure.

You will work across cybersecurity, IT operations, and program management to ensure controls are documented and evidenced in alignment with applicable federal requirements under the CIO/PMO oversight.

Qualifications

• 5 years conducting cybersecurity assessments, compliance evaluations, or risk management.
• Working knowledge of NIST RMF, NIST SP 800-53, NIST SP 800-171, or similar federal frameworks.
• Experience developing risk reports, tracking mitigation plans, and evaluating control effectiveness.
• Security+ certification.
• Ability to perform overlapping cybersecurity functions in federal IT compliance environments (FISMA, FedRAMP, Zero Trust).

Responsibilities

• Perform cybersecurity assessments and control reviews; document risks and recommend mitigations.
• Develop risk reports and track mitigation plans, POA&Ms, and control effectiveness.
• Support RMF and security assessment and authorization documentation, including preparation of authorization packages for assessment.
• Maintain audit-ready evidence and coordinate with technical teams on compliance reporting.

Skills

Cybersecurity assessments

Risk management

NIST RMF

NIST SP 800-53

NIST SP 800-171

Security+ certification

Education

CISA or CRISC certification

Job description

Edgewater Federal Solutions is seeking a Cyber Risk and Assessment Analyst to support the Agency’s IT and cybersecurity compliance program by assessing risk, maintaining audit-ready documentation, and tracking corrective actions to closure.

You will work across cybersecurity, IT operations, and program management to ensure controls are documented and evidenced in alignment with applicable federal requirements under the CIO/PMO oversight.