Remote RMF A&A Risk Analyst (FISMA/FedRAMP)

Financeroles; United States; Remote; USD 110,000 - 112,000; Full time

Benefits offered by this job

Up to 6% 401(k) match

Paid time off

Medical, dental, vision

Life & AD&D insurance

Short/long-term disability

Paid holidays

EAP

FSA/HSA

Professional development

Voluntary benefits

Job summary

Cherokee Federal is seeking a Cybersecurity A&A Risk Analyst to provide advanced GRC support for federal information systems, aligning with FISMA and RMF. You will manage external authorization activities, conduct risk assessments, and coordinate monitoring across programs.

The role requires strong analytical, documentation, and stakeholder engagement skills to ensure compliance with federal laws, regulations, and directives, with a remote setup and competitive compensation.

Qualifications

• 7+ years in cybersecurity with 4+ years RMF/A&A for federal systems.
• Experience implementing the NIST RMF framework.
• Active Public Trust clearance or ability to obtain.
• US citizenship is required.

Responsibilities

• Lead full lifecycle RMF activities per NIST SP 800-37.
• Develop and maintain SSPs, SAPs, SARs, and POA&Ms.
• Review FedRAMP authorization packages and updates.
• Monitor ATO packages in FedRAMP repositories.
• Engage with system owners, ISSOs, CSPs, and stakeholders to review changes.
• Support continuous monitoring and remediation efforts.

Skills

GRC experience

RMF implementation

NIST RMF

FedRAMP familiarity

Education

Bachelor’s degree in Cybersecurity/IT/Public Policy

Certifications: CISSP, CISM, CAP

Tools

ServiceNow

CSAM

Confluence

JIRA

Job description

Cherokee Federal is seeking a Cybersecurity A&A Risk Analyst to provide advanced GRC support for federal information systems, aligning with FISMA and RMF. You will manage external authorization activities, conduct risk assessments, and coordinate monitoring across programs.

The role requires strong analytical, documentation, and stakeholder engagement skills to ensure compliance with federal laws, regulations, and directives, with a remote setup and competitive compensation.