Federal Security Compliance Analyst - RMF/NIST

Maximus; Northern (KY); Hybrid; USD 110,000 - 160,000; Full time

Job summary

Maximus is seeking a Cybersecurity Analyst to support a federal client, focusing on compliance and risk management for mission-critical systems. This onsite role in Annapolis Junction, MD requires a Secret clearance and US citizenship.

The position involves POA&Ms, vulnerability management, risk analysis, and security documentation across federal frameworks. You will collaborate with cross-functional teams to validate controls, deliver compliance reports, and contribute to security awareness

Qualifications

• Active Secret clearance required.
• US Citizens only due to contract requirements.
• 7+ years of experience in security compliance, vulnerability management, or related cybersecurity field.
• 4+ years managing POA&Ms within government contracting environments.
• Experience with federal security frameworks (NIST RMF, FISMA).
• Ability to collaborate with technical teams to address findings and implement compliance solutions.

Responsibilities

• Serve as the primary point of contact for security compliance activities and coordinate with stakeholders.
• Manage and maintain POA&Ms, ensuring timely remediation and alignment with government requirements.
• Support vulnerability management: run scans, review results, track remediation and verify closure.
• Conduct risk assessments, risk analysis, and document risk mitigation strategies.
• Conduct compliance reviews to ensure adherence to federal regulations and frameworks (NIST RMF, 800-53).
• Prepare and maintain security documentation (SSPs, assessment reports, risk analyses).
• Collaborate with technical teams to validate controls and provide compliance guidance.
• Participate in incident response and after-action reviews, documenting lessons learned.

Skills

Communication skills

Security clearance

Education

CISSP/CISM/CAP certifications

Job description

Maximus is seeking a Cybersecurity Analyst to support a federal client, focusing on compliance and risk management for mission-critical systems. This onsite role in Annapolis Junction, MD requires a Secret clearance and US citizenship.

The position involves POA&Ms, vulnerability management, risk analysis, and security documentation across federal frameworks. You will collaborate with cross-functional teams to validate controls, deliver compliance reports, and contribute to security awareness