Remote Cybersecurity Analyst: RMF/ATO Specialist

Sprezzatura; United States; Remote; USD 90,000 - 100,000; Full time

Benefits offered by this job

Medical, Dental, and Vision

HSA with Company contribution

Life and Disability insurance

Voluntary insurance: Accident, Hosp. &

Flexible Spending Accounts

Paid time off & Holidays

401(k) with company match

Job summary

Sprezzatura is seeking a Cyber Security Analyst to join our team supporting the Veterans Health Administration Enrollment System (VES). The role focuses on maintaining ATO, RMF, and VA cybersecurity requirements, and coordinating continuous monitoring activities. You will develop, maintain, and track security artifacts and work with VA stakeholders to uphold the security posture.

U.S. citizenship or permanent resident status is required; the position is remote in the U.S.

Qualifications

• Bachelor Degree required or experience considered in lieu of degree.
• Experience in federal cybersecurity programs preferred (VA experience).
• Strong knowledge of FISMA, NIST RMF, SP 800-53 Rev.5.
• Experience with ServiceNow CAM, eMASS, or similar GRC tools.
• Experience developing ATO packages and POA&Ms.
• Familiarity with vulnerability management and privacy requirements.
• Strong written and verbal communication and stakeholder coordination.
• 3+ years in roles like RMF Specialist, ISSO, or Cybersecurity Engineer.
• VA cybersecurity policies familiarity.
• Certifications: CISSP, CISM, CGRC, CISA, or CompTIA Security+.

Responsibilities

• Serve as VES System Steward within VA CAM platform.
• Develop, maintain, and coordinate ATO authorization packages, including security controls, implementation statements, and supporting evidence.
• Support security authorization and continuous monitoring activities in accordance with FISMA, NIST SP 800-53 Rev. 5, and VA policies.
• Maintain and update security documentation, including SSP, CMP, PTA, PIA, and other artifacts.
• Coordinate vulnerability assessments, penetration testing, security control assessments, and remediation activities.
• Develop, maintain, and track POA&Ms, including remediation schedules and closure evidence.
• Coordinate with System Owners, ISSOs, Privacy Officers, technical teams, and VA cybersecurity stakeholders.
• Maintain system authorization boundary documentation, including minor applications and interconnections.
• Monitor security risks, authorization milestones, and compliance activities; report to leadership.
• Support security audits, assessments, and ongoing authorization activities to maintain VES posture.

Skills

Analytical skills

Technical writing

Communication

Stakeholder coordination

Cybersecurity knowledge

Education

Bachelor Degree or equivalent experience

Tools

ServiceNow CAM

eMASS

GRC tools

Job description

Sprezzatura is seeking a Cyber Security Analyst to join our team supporting the Veterans Health Administration Enrollment System (VES). The role focuses on maintaining ATO, RMF, and VA cybersecurity requirements, and coordinating continuous monitoring activities. You will develop, maintain, and track security artifacts and work with VA stakeholders to uphold the security posture.

U.S. citizenship or permanent resident status is required; the position is remote in the U.S.