Remote Cyber Security Analyst: RMF & ATO Expert

Automatic Data Processing, Inc.; United States; Remote; USD 90,000 - 100,000; Full time

Benefits offered by this job

Medical, Dental, Vision

Health Saving Account with company

Company paid Life Insurance

Disability Insurance (short/long)

Voluntary Insurance Options

FSAs

Paid Time Off & Holidays

401(k) with company match

Job summary

Sprezzatura is seeking a Cyber Security Analyst to join our team supporting the Veterans Health Administration enrollment system. You will help maintain ATO packages, ensure RMF/NIST compliance, and coordinate security controls across VA policies and program requirements.

The role emphasizes continuous monitoring, security documentation, vulnerability management, and collaboration with VA stakeholders to uphold the VES security posture and meet federal requirements.

Qualifications

• Familiarity with federal cybersecurity programs and policies.
• Experience with RMF/authorization processes and security control documentation.
• Certifications such as CISSP, CISM, CISA or equivalent preferred.

Responsibilities

• Serve as System Steward and coordinate CAM-based activities.
• Develop, maintain, and coordinate ATO packages with security controls and evidence.
• Support continuous monitoring per FISMA, NIST SP 800-53 Rev. 5, and VA requirements.
• Update SSP, CMP, PTA, PIA and related artifacts as needed.
• Coordinate vulnerability assessments and remediation with VA stakeholders.
• Track POA&Ms and remediation milestones with status updates.

Skills

FISMA RMF

NIST 800-53

VA policies

Certs: CISSP/CISM/CISA

Technical writing

Education

Bachelor Degree (or equivalent)

Tools

ServiceNow CAM

eMASS

Job description

Sprezzatura is seeking a Cyber Security Analyst to join our team supporting the Veterans Health Administration enrollment system. You will help maintain ATO packages, ensure RMF/NIST compliance, and coordinate security controls across VA policies and program requirements.

The role emphasizes continuous monitoring, security documentation, vulnerability management, and collaboration with VA stakeholders to uphold the VES security posture and meet federal requirements.