Cybersecurity Program Analyst

Sprymethods; Washington (District of Columbia); On-site; USD 65,000 - 90,000; Full time

Job summary

Sprymethods is seeking a Project Analyst in Washington, DC to manage schedules, track performance, and support RMF, A&A, and ATO activities across multiple cybersecurity projects.

You will prepare SARs, RARs, SAPs, and authorization artifacts, develop executive dashboards, coordinate meetings, and ensure compliance with regulatory requirements while communicating with government stakeholders and customers.

Qualifications

• Bachelor's degree in a related field is required.
• Public Trust clearance eligibility required.
• 3 years of relevant experience in project/program management or federal IT.
• Familiarity with RMF, A&A, ATO processes.
• Experience producing schedules, reports, and technical docs.
• Willingness to travel up to two days per week.

Responsibilities

• Maintain and manage integrated project plans, schedules, milestones, dependencies, deliverables, risks, issues, action items, and performance metrics across multiple cybersecurity assessment and authorization projects.
• Coordinate and support RMF, A&A, and ATO activities by working with ISSOs, system owners, security teams, government stakeholders, and assessors to track assessments, findings, remediation efforts, and authorization package progress.
• Prepare, maintain, and review cybersecurity documentation, including SARs, RARs, SAPs, ATO letters, waiver memoranda, SOPs, templates, briefing materials, and other program deliverables.
• Develop executive-level reports, dashboards, status updates, and presentations that communicate project health, schedule performance, risks, issues, milestones, and authorization activities.
• Facilitate meetings, develop agendas and briefing packages, document decisions and action items, and coordinate follow-up activities with program, security, and customer stakeholders.
• Ensure project and security documentation complies with organizational, regulatory, and cybersecurity requirements and is maintained accurately throughout the project lifecycle.
• Analyze program performance, provide recommendations to leadership, track KPIs, and support strategic planning and decision-making.
• Identify and implement process improvements, documentation standards, and best practices to enhance program execution and cybersecurity authorization activities.
• Draft and maintain official correspondence and customer-facing communications supporting authorization, compliance, and program management efforts.
• Provide ad hoc project, program, cybersecurity, and administrative support to meet evolving mission, customer, and contract requirements.

Skills

Project coordination

RMF/ATO knowledge

Cybersecurity compliance

Communication skills

Documentation development

Travel readiness

Education

Bachelor's degree in Business Administration/Project Management/Cybersecurity/IS

CAPM certification

Tools

CompTIA Security+

Microsoft Office Suite

Job description

About Us:

Spy Methods is a proven provider of mission-focused technology, cybersecurity, and program management solutions supporting critical Federal and DoD missions. We specialize in delivering integrated, high-impact solutions across cyber operations, enterprise resource management, and mission support services. Our culture emphasizes collaboration, accountability, and innovation - empowering our teams to deliver meaningful outcomes in complex, high-security environments.

Who We’re Looking For (Position Overview)

The Project Analyst provides project management, program coordination, and cybersecurity authorization support to ensure the successful execution of organizational initiatives and Assessment & Authorization (A&A)/Authority to Operate (ATO) requirements. This position is responsible for maintaining project schedules, tracking program performance, coordinating stakeholder activities, managing documentation, supporting security assessment efforts, and facilitating communication across project teams. The ideal candidate possesses strong organizational, analytical, and communication skills and can effectively manage multiple priorities in a fast-paced environment.

• Maintain and manage integrated project plans, schedules, milestones, dependencies, deliverables, risks, issues, action items, and performance metrics across multiple cybersecurity assessment and authorization projects.
• Coordinate and support RMF, A&A, and ATO activities by working with ISSOs, system owners, security teams, government stakeholders, and assessors to track assessments, findings, remediation efforts, and authorization package progress.
• Prepare, maintain, and review cybersecurity documentation, including Security Assessment Reports (SARs), Risk Assessment Reports (RARs), Security Authorization Packages (SAPs), ATO letters, waiver memoranda, SOPs, templates, briefing materials, and other program deliverables.
• Develop executive-level reports, dashboards, status updates, and presentations that communicate project health, schedule performance, risks, issues, milestones, and authorization activities.
• Facilitate meetings, develop agendas and briefing packages, document decisions and action items, and coordinate follow-up activities with program, security, and customer stakeholders.
• Ensure project and security documentation complies with organizational, regulatory, and cybersecurity requirements and is maintained accurately throughout the project lifecycle.
• Analyze program performance, provide recommendations to leadership, track key performance indicators, and support strategic planning and decision-making.
• Identify and implement process improvements, documentation standards, and best practices to enhance program execution and cybersecurity authorization activities.
• Draft and maintain official correspondence and customer-facing communications supporting authorization, compliance, and program management efforts.
• Provide ad hoc project, program, cybersecurity, and administrative support to meet evolving mission, customer, and contract requirements.

• Public Trust clearance eligibility required.
• Bachelor's degree in Business Administration, Project Management, Cybersecurity, Information Systems, or a related discipline. Equivalent combination of education and experience may be substituted.
• CompTIA Security+ certification
• 3 years of experience supporting project management, program management, cybersecurity compliance, or federal IT initiatives.
• Working knowledge of Assessment & Authorization (A&A), Authority to Operate (ATO), and Risk Management Framework (RMF) processes.
• Experience developing and maintaining project schedules, reports, briefings, and technical documentation.
• Strong organizational, analytical, problem-solving, and communication skills.
• Demonstrated ability to manage multiple assignments, priorities, and deadlines simultaneously.
• Proficiency with Microsoft Office Suite, including Word, Excel, PowerPoint, Outlook, Teams, and SharePoint.
• Experience supporting customer-facing deliverables.
• Must be able to travel to customer site up to two days a week.

• Experience supporting federal government cybersecurity programs.
• Familiarity with NIST RMF, FISMA, FedRAMP, and related cybersecurity compliance frameworks.
• Certified Associate in Project Management (CAPM)