Remote Senior Information Security Analyst — CMS RMF & ATO

eSimplicity Inc.; United States; Remote; USD 113,000 - 160,000; Full time

Benefits offered by this job

Medical benefits

Dental benefits

Vision benefits

401(k) retirement

Paid time off

Paid holidays

Life and disability insurance

Wellness programs

Job summary

eSimplicity Inc. is seeking a Senior Information Security Analyst to support a CMS program, specializing in FISMA, RMF, and NIST SP 800-53 controls.

You will develop and maintain security control statements, assess evidence, and drive ATO readiness while coordinating with CMS ISSOs, engineers, and program leadership. The role emphasizes vulnerability management, continuous monitoring, and audit readiness across cloud and on-prem environments, with a focus on accurate documentation and risk

Qualifications

• Experience with federal systems subject to FISMA and RMF.
• Ability to develop and maintain security control implementation statements and supporting evidence.
• Experience in ATO activities and maintaining related artifacts.
• Ability to communicate security requirements to diverse stakeholders.

Responsibilities

• Serve as senior security advisor to CMS stakeholders and leadership.
• Translate FISMA/NIST/ARS requirements into actionable tasks for teams.
• Develop, review, and maintain security control implementation statements with evidence.
• Support ATO artifacts, risk assessments, POA&M, and contingency plans.
• Lead security assessments, evidence collection, and remediation tracking.
• Review vulnerability findings and coordinate remediation with teams.
• Develop security metrics, dashboards, and risk summaries for government stakeholders.

Skills

FISMA

NIST RMF

NIST SP 800-53

CMS ARS

ATO

Vulnerability management

Audit

Continuous monitoring

Security documentation

Education

Bachelor's degree

Tools

Tenable

Snyk

AWS Security Hub

AWS Inspector

Job description

eSimplicity Inc. is seeking a Senior Information Security Analyst to support a CMS program, specializing in FISMA, RMF, and NIST SP 800-53 controls.

You will develop and maintain security control statements, assess evidence, and drive ATO readiness while coordinating with CMS ISSOs, engineers, and program leadership. The role emphasizes vulnerability management, continuous monitoring, and audit readiness across cloud and on-prem environments, with a focus on accurate documentation and risk