Remote RMF Controls / ConMon Analyst for Federal Programs

K2United, LLC.; Washington (District of Columbia); Hybrid; USD 110,000 - 150,000; Full time

Benefits offered by this job

401(k) with employer matching

Low-cost medical coverage for dependin

Paid time off

Paid jury duty, military service, etc.

Wellness stipend and fitness reimburse

Tuition assistance

Casual work environment

Certifications support and training

Free access to CareerSafe courses

Job summary

K2United, LLC. is hiring an RMF Controls / ConMon Analyst to support a federal health-sector client. You will sustain ongoing-authorization, ensure evidence freshness, and manage POA&Ms across a large system portfolio.

This role emphasizes coordination with ISSOs, system owners, and assessors to keep remediation on schedule. You will develop ConMon plans, maintain the Risk Management Register, and contribute to executive dashboards, FISMA reporting, and audit responses, while supporting audits

Qualifications

• Bachelor’s degree or equivalent experience in a related field or policy.
• Four+ years of federal RMF operations, continuous monitoring, or security control assessment per NIST 800-37/53/53A.
• Experience managing POA&Ms at portfolio scale with aging analysis, milestones, evidence, and closure validation.
• Experience with control assessments using interview, examine, and test methods, documenting defensible results.
• Knowledge of risk registers, risk-acceptance/waiver processes, and NIST SP 800-30 risk assessment methodology.

Responsibilities

• Execute ongoing-authorization control evaluations on a rotating quarterly cycle and document results.
• Develop and maintain Continuous Monitoring (ConMon) Plans for visibility into security postures.
• Maintain the enterprise Risk Management Register with risks, status, and mitigation plans.
• Manage POA&Ms, linking weaknesses to controls and documenting remediation milestones.
• Support risk mitigation waiver lifecycle including intake, approval, and waivers register.
• Coordinate Contingency Plan and Incident Response Plan tests with reports and corrective actions.
• Verify artifact freshness and flag stale evidence to avoid audit findings.
• Provide oversight for High Value Assets with prioritized monitoring and reporting.
• Prepare inputs for weekly dashboards and monthly risk profiles for executives.

Skills

POA&M management

RMF operations

Analytical writing

GRC tooling

Education

Bachelor’s degree or equivalent

Tools

JCAM

CSAM

eMASS

Xacta

Job description

K2United, LLC. is hiring an RMF Controls / ConMon Analyst to support a federal health-sector client. You will sustain ongoing-authorization, ensure evidence freshness, and manage POA&Ms across a large system portfolio.

This role emphasizes coordination with ISSOs, system owners, and assessors to keep remediation on schedule. You will develop ConMon plans, maintain the Risk Management Register, and contribute to executive dashboards, FISMA reporting, and audit responses, while supporting audits