Junior RMF & Cyber Governance Analyst

Dragonfli Group; United States; Hybrid; USD 65,000 - 90,000; Full time

Benefits offered by this job

Medical plans and insurance options

Dental coverage

Vision coverage

401(k) with employer match

Long-Term Disability insurance

Life Insurance

Paid time off 15–25 days

Federal holidays

Job summary

Dragonfli Group is seeking a Junior Cyber Governance and Compliance Analyst to support RMF-based authorization for a large federal agency. The role emphasizes learning RMF by doing, with opportunities to present to clients and decision makers and to contribute to risk mitigation strategies.

Ideal candidates bring foundational RMF exposure, strong communication skills, and a willingness to work in a multi-year contract. U.S.

Qualifications

• Must have a Bachelor's degree in cybersecurity, information technology, or a related field.
• Exposure to Assessment and Authorization (RMF) work through coursework, internship, or professional experience.
• Working understanding of the Risk Management Framework and the federal authorization process.
• Strong written and verbal communication skills, including comfort supporting or delivering presentations.
• Ability to work independently and as a member of a team.
• U.S. Citizenship or Permanent Residency, with all work performed within the continental U.S.
• Ability to pass a federal agency suitability or background investigation.

Responsibilities

• Support and contribute to the execution of the Risk Management Framework to authorize IT systems.
• Provide information on whether information systems are operating at an acceptable level of risk to the organization.
• Support information system authorization decisions by performing risk trade-off analyses.
• Contribute to the development of risk mitigation strategies and solutions.
• Support technical analysis across cybersecurity risk management activities: categorizing a system, proposing security control selections, implementing security controls, and providing comprehensive assessments of risk posture.
• Support security control assessment activities in accordance with NIST SP 800-37 and NIST SP 800-53A.
• Support presentations and, at times, present to clients and other decision makers across technical and non-technical audiences.
• Support advice to clients on technical designs, implementations, and solutions that protect against cybersecurity attacks.
• Support POA&M tracking, cyber risk register upkeep, and tracking of cybersecurity regulations, guidance, and data calls.
• Support cybersecurity dashboard development and the automation of routine risk reporting and compliance tracking.

Skills

RMF fundamentals

Security control familiarity

Risk trade-off analysis

POA&M tracking

Security documentation

Cyber risk register

Dashboard & reporting

Automation tooling exposure

Education

Bachelor's degree in cybersecurity or IT

Tools

Xacta

eMASS

CSAM

Archer

ServiceNow IRM

Job description

Dragonfli Group is seeking a Junior Cyber Governance and Compliance Analyst to support RMF-based authorization for a large federal agency. The role emphasizes learning RMF by doing, with opportunities to present to clients and decision makers and to contribute to risk mitigation strategies.

Ideal candidates bring foundational RMF exposure, strong communication skills, and a willingness to work in a multi-year contract. U.S.