Remote Federal RMF & A&A Risk Analyst

Jobgether; United States; Remote; USD 110,000 - 112,000; Full time

Benefits offered by this job

401(k) match up to 6%

Healthcare coverage

Paid time off

AD&D insurance

Disability insurance

EAP

FSA/HSA eligibility

Training and certification support

Remote work within the US

Job summary

Jobgether is seeking an experienced cybersecurity professional to own the RMF lifecycle and related A&A activities for federal systems. You will develop and maintain SSPs, SAPs, SARs, and POA&Ms, review FedRAMP packages, and coordinate remediation with ISSOs and system owners.

Your role requires strong knowledge of RMF, NIST SP 800-53 Rev.5, and federal cloud security, with active Public Trust clearance or the ability to obtain one. This is a remote US-based opportunity.

Qualifications

• Bachelor’s degree in Cybersecurity, IT, Public Policy, or related discipline or equivalent experience.
• 7+ years in cybersecurity, including 4+ years supporting RMF/A&A activities.
• Experience implementing RMF with federal compliance requirements.
• Certifications such as CISSP, CISM, or CAP.
• FISMA familiarity and OMB M-22-09, and federal cloud security requirements.
• Experience with FedRAMP environments for Moderate/High impact systems.
• Strong risk assessment, authorization, monitoring, and remediation knowledge.
• Proficient with Microsoft 365 and effective with technical and executive audiences.
• Active Public Trust clearance or ability to obtain; US citizen or LPR.
• Experience with Confluence/Jira and governance policy initiatives.

Responsibilities

• Manage the full RMF lifecycle per NIST SP 800-37.
• Develop and maintain SSPs, SAPs, SARs, and POA&Ms.
• Review FedRAMP packages and monitor in FedRAMP repository.
• Evaluate security controls per NIST SP 800-53 Rev.5.
• Conduct risk assessments and provide recommendations to officials.
• Support continuous monitoring and remediation coordination.
• Collaborate with ISSOs, system owners, and CSPs for compliance.
• Analyze regulations and guidance to support compliance.
• Support governance discussions and peer review cybersecurity policies.
• Assist with risk reporting, dashboards, and FISMA reporting.

Skills

RMF knowledge

NIST SP 800-53

FedRAMP

A&A processes

Policy communication

Cross-functional collaboration

Education

Bachelor’s degree in Cybersecurity/IT/Public Policy

CISSP/CISM/CAP

Tools

ServiceNow

CSAM

GRC tools

Confluence/Jira

Job description

Jobgether is seeking an experienced cybersecurity professional to own the RMF lifecycle and related A&A activities for federal systems. You will develop and maintain SSPs, SAPs, SARs, and POA&Ms, review FedRAMP packages, and coordinate remediation with ISSOs and system owners.

Your role requires strong knowledge of RMF, NIST SP 800-53 Rev.5, and federal cloud security, with active Public Trust clearance or the ability to obtain one. This is a remote US-based opportunity.