Remote Senior Information Assurance & GRC Analyst

Divray Koves, LLC; United States; On-site; USD 72,000 - 88,000; Full time

Job summary

Divray Koves, LLC is seeking an Information Assurance Senior Cyber Security Analyst (Remote) to support federal information security programs. The role focuses on governance, documentation, and risk management within NIST RMF, ATO, and GRC tooling, emphasizing POA&Ms and audit readiness.

This is primarily an administrative/GRC role rather than hands-on engineering, requiring clear communication with technical and non-technical stakeholders and eligibility for a Public Trust clearance.

Qualifications

• 10 years of relevant experience preferred or a combination of education and experience considered.
• Proven knowledge of NIST RMF and ATO processes.
• Hands-on experience with GRC tools (eMASS) and security documentation.
• Experience with security assessments, audits, and vulnerability management.

Responsibilities

• Work within the RMF and ATO processes for federal systems.
• Support security control assessments and audits, including self-assessments and third-party assessments.
• Use GRC tools (eMASS) to manage controls, evidence, POA&Ms, and compliance reporting.
• Develop and maintain security documentation: policies, procedures, standards, guidelines, artifacts.
• Contribute to vulnerability management and risk mitigation strategies.
• Collaborate with stakeholders to track issues, status, and audit readiness.

Skills

NIST RMF

ATO processes

GRC tools

security documentation

risk management

Education

Bachelor's degree in Cybersecurity, Computer Science, Information Systems/Technology, or related discipline

Tools

eMASS

Job description

Divray Koves, LLC is seeking an Information Assurance Senior Cyber Security Analyst (Remote) to support federal information security programs. The role focuses on governance, documentation, and risk management within NIST RMF, ATO, and GRC tooling, emphasizing POA&Ms and audit readiness.

This is primarily an administrative/GRC role rather than hands-on engineering, requiring clear communication with technical and non-technical stakeholders and eligibility for a Public Trust clearance.