Remote Cybersecurity Analyst: RMF, ATO & ISSO

JBS International; Virginia Beach (VA); Hybrid; USD 90,000 - 140,000; Full time

Job summary

JBS International is seeking a Cybersecurity Analyst to support cybersecurity, information assurance, risk management, and compliance across Digital Services initiatives. The role includes acting as ISSO for federal systems, supporting ATO activities, continuous monitoring, and security documentation efforts across cloud environments and enterprise technology.

The position collaborates with engineering, architecture, product, and program teams to ensure federal security requirements are met,

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering, or a related field.
• 3 years of experience supporting cybersecurity, information assurance, security compliance, enterprise security, or risk management programs.
• 3 years of experience applying federal cybersecurity frameworks and standards, including FISMA, NIST RMF, NIST SP 800-53, FICAM, or comparable federal requirements.
• 3+ years of experience supporting Authorization to Operate (ATO), Security Assessment and Authorization (SA&A), continuous monitoring, or related authorization activities.
• Experience supporting the security lifecycle of one or more FIPS 199 Moderate-impact federal information systems, including security documentation, security control implementation, assessment support, ATO, and continuous monitoring activities.
• Experience developing and maintaining security authorization documentation, including SSPs, SAPs, SARs, POA&Ms, and related security artifacts.
• Experience supporting security assessments, compliance reviews, vulnerability management, audit support, or enterprise risk management activities.
• Experience collaborating with software engineering, cloud, infrastructure, architecture, product, and project teams to integrate cybersecurity requirements into technology solutions.
• Working knowledge of cloud platforms (AWS and/or Azure), identity and access management, secure SDLC, and cybersecurity best practices.
• One or more professional cybersecurity certifications such as CompTIA Security+, CompTIA CySA+, ISC2 CISSP/CC, CGRC, SSCP, or equivalent cybersecurity certification.

Responsibilities

• Provide cybersecurity and privacy subject matter expertise across digital products, cloud services, enterprise applications, AI initiatives, and technology modernization efforts.
• Advise project teams on identity and access management, security controls, data protection, authorization boundaries, and cybersecurity best practices throughout the system development lifecycle.
• Review technical solutions, architectures, and proposed system changes to identify security risks and recommend mitigations.
• Collaborate with software engineering, infrastructure, architecture, product, and data teams to integrate security requirements into solution planning, development, testing, deployment, and operations.
• Support alignment of technology initiatives with applicable federal cybersecurity, privacy, and risk management requirements.
• Support identification, analysis, documentation, and tracking of cybersecurity and compliance risks across systems, applications, cloud environments, and operational activities.
• Conduct or support security assessments, compliance reviews, technical evaluations, and security control validation activities.
• Contribute to governance reviews, technical assessments, risk recommendations, and cybersecurity decision support.
• Assist in developing and maintaining cybersecurity policies, procedures, standards, and implementation guidance.
• Support continuous improvement of security posture, compliance maturity, and enterprise risk visibility.
• Coordinate vulnerability identification, remediation tracking, and verification activities with engineering, infrastructure, and operations teams.
• Review vulnerability scan results, assess findings, monitor corrective actions, and track remediation through completion.
• Support security incident response activities through documentation, coordination, evidence collection, corrective action tracking, and lessons learned.
• Monitor changes to systems and cloud environments to ensure continued compliance with approved security baselines.
• Support audits through evidence collection, documentation, corrective action management, and audit response activities.
• Coordinate with project managers, architects, developers, Corporate IT, Data & AI, and governance stakeholders to embed cybersecurity in planning and delivery.

Skills

Cybersecurity expertise

Risk management

Documentation & reporting

Communication skills

Security assessment experience

Cloud security knowledge

FedRAMP/RMF knowledge

Public Trust eligibility

Education

Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering, or a related field

Job description

JBS International is seeking a Cybersecurity Analyst to support cybersecurity, information assurance, risk management, and compliance across Digital Services initiatives. The role includes acting as ISSO for federal systems, supporting ATO activities, continuous monitoring, and security documentation efforts across cloud environments and enterprise technology.

The position collaborates with engineering, architecture, product, and program teams to ensure federal security requirements are met,