Remote RMF Controls & ConMon Analyst — Contract

K2United; United States; On-site; USD 75,000 - 90,000; Full time

Benefits offered by this job

401(k) with employer matching

Low-cost medical coverage for employee

Paid time off

Jury duty/military/voting leave

Wellness stipend

Tuition assistance

Certification support

CareerSafe training access

Job summary

K2United is an organization that houses two distinct, national, customer-facing brands tied together by a shared purpose: setting the standard for an extraordinary workplace. Through our brands, K2Share and CareerSafe, we provide advisory services in cyber risk management and online education for workforce readiness.

We are seeking a RMF Controls / ConMon Analyst to sustain ongoing-authorization posture across a broad portfolio, producing executive dashboards, FISMA reporting, and audit

Qualifications

• Bachelor’s degree in a related field or equivalent experience.
• 4+ years in federal RMF operations or continuous monitoring.
• Experience managing POA&Ms at portfolio scale.
• Experience with control assessments using interview, examine, and test methods.
• Knowledge of risk registers and waiver processes (NIST SP 800-30).
• Experience with enterprise GRC platforms (JCAM/CSAM/eMASS/Xacta).
• Strong analytical writing and executive communication.

Responsibilities

• Execute ongoing-authorization control evaluations on a rotating cycle, document results and POA&M disposition.
• Develop and maintain ConMon Plans for visibility into security posture.
• Maintain enterprise Risk Management Register with risks, status and mitigation plans.
• Manage POA&Ms to timely remediation with milestones and evidence.
• Support Risk Mitigation Waivers including intake and reassessment.
• Coordinate Contingency and Incident Response Plan tests and reports.
• Verify artifact freshness and flag stale evidence before audits.
• Provide oversight for High Value Assets with prioritized monitoring.
• Prepare inputs for weekly dashboards and monthly risk profiles.
• Support assessments and audits with evidence collection and corrective actions.

Skills

RMF operations

POA&M management

NIST RMF

Risk assessment

Control assessments

Executive communication

Education

Bachelor’s degree

Tools

JCAM

CSAM

eMASS

Xacta

Job description

K2United is an organization that houses two distinct, national, customer-facing brands tied together by a shared purpose: setting the standard for an extraordinary workplace. Through our brands, K2Share and CareerSafe, we provide advisory services in cyber risk management and online education for workforce readiness.

We are seeking a RMF Controls / ConMon Analyst to sustain ongoing-authorization posture across a broad portfolio, producing executive dashboards, FISMA reporting, and audit