Federal RMF Analyst: Security Authorization & Compliance

Cybersecurity Jobs; San Antonio (TX); Hybrid; USD 73,000 - 109,000; Full time

Benefits offered by this job

Comprehensive compensation package

Medical and dental coverage

Pension and 401(k) plans

Paid time off options

Flexible vacation policy

Leaves of absence

Job summary

EY is seeking an ISSO Analyst in San Antonio, TX to support RMF and SCA activities across the RMF lifecycle for federal information systems. The role emphasizes maintaining authorization docs, building evidence packages, and remediation tracking in a hybrid work setup.

The position requires a Bachelor's degree in a related field, 1–3+ years of cybersecurity experience, and the ability to obtain a secret clearance. Travel up to 20% may be required.

Qualifications

• Bachelor's degree in cybersecurity, information technology or a related field.
• 1–3+ years of cybersecurity experience, including hands-on RMF activities.
• Ability to obtain and maintain a secret level clearance.
• Hybrid work environment familiarity.
• Experience developing or maintaining RMF documentation and evidence.
• Familiarity with federal tools such as eMASS, JCAM, CSAM or Xacta.

Responsibilities

• Support RMF delivery by maintaining documentation and tracking actions.
• Assist system owners with authorization activities and evidence collection.
• Draft and update System Security Plans and control statements.
• Collect, organize, and map evidence to NIST SP 800-53 controls.
• Prepare evidence packages and interview materials for assessments.
• Maintain POA&M records and track remediation progress.
• Perform quality checks for dates, conclusions, and formatting.

Skills

RMF delivery

Documentation

POA&M tracking

Continuous monitoring

Evidence mapping

Education

Bachelor's degree in cybersecurity, information technology, information systems, computer science, engineering, business, or a related field

Tools

eMASS

JCAM

CSAM

Xacta

Job description

EY is seeking an ISSO Analyst in San Antonio, TX to support RMF and SCA activities across the RMF lifecycle for federal information systems. The role emphasizes maintaining authorization docs, building evidence packages, and remediation tracking in a hybrid work setup.

The position requires a Bachelor's degree in a related field, 1–3+ years of cybersecurity experience, and the ability to obtain a secret clearance. Travel up to 20% may be required.