Remote Cyber Security Analyst | RMF/ATO & VA Compliance

Sprezzatura Management Consulting, LLC; Arlington (VA); Remote; USD 90,000 - 100,000; Full time

Benefits offered by this job

Medical, Dental, Vision

401(k) match

HSA with company contribution

Paid time off & holidays

Life and disability insurance

Voluntary insurance options

Job summary

Sprezzatura is seeking a Cyber Security Analyst to support the Veterans Health Administration Enrollment System (VES) with a focus on ATO, RMF, and VA cybersecurity requirements. This is a remote, U.S. – based role requiring U.S.

citizenship or permanent residency. You will develop security documentation, coordinate continuous monitoring, and manage POA&Ms while collaborating with VA stakeholders to maintain the VES security posture.

Qualifications

• Bachelor Degree or higher (or equivalent experience).
• Experience with federal cybersecurity programs, preferably VA.
• Strong knowledge of FISMA, NIST RMF, NIST SP 800-53 Rev. 5, and federal security authorization processes.
• Experience with ServiceNow CAM, eMASS or similar GRC tools.
• Experience developing ATO packages, managing POA&Ms, and coordinating continuous monitoring.

Responsibilities

• Serve as the VES System Steward within VA's CAM platform.
• Develop, maintain, and coordinate ATO authorization packages with security controls and evidence.
• Support security authorization and continuous monitoring per FISMA, NIST SP 800-53 Rev. 5, VA policies.
• Maintain SSP, CMP, PTA, PIA and other artifacts.
• Coordinate vulnerability assessments, pen tests, and remediation activities.
• Develop and track POA&Ms with remediation schedules.
• Coordinate with System Owners, ISSOs, Privacy Officers, and VA cybersecurity stakeholders.
• Maintain authorization boundary documentation for minor apps and interconnections.
• Monitor risks, milestones, and provide status reports to leadership.
• Support security audits and ongoing authorization activities.

Skills

FISMA/NIST RMF knowledge

ATO packages & POA&Ms coordination

Vulnerability management

Security documentation

VA cybersecurity policies familiarity

Stakeholder coordination

RMF Specialist role experience

Cybersecurity certifications (CISSP/C5

Education

Bachelor Degree or higher

Tools

ServiceNow CAM

eMASS

Job description

Sprezzatura is seeking a Cyber Security Analyst to support the Veterans Health Administration Enrollment System (VES) with a focus on ATO, RMF, and VA cybersecurity requirements. This is a remote, U.S. – based role requiring U.S.

citizenship or permanent residency. You will develop security documentation, coordinate continuous monitoring, and manage POA&Ms while collaborating with VA stakeholders to maintain the VES security posture.