RMF/A&A Analyst — Zero Trust GRC for NIH (Hybrid)

eTelligent Group LLC; Bethesda (MD); Hybrid; USD 90,000 - 100,000; Full time

Job summary

eTel is seeking a specialist to map NIH FISMA systems to Zero Trust controls within NIH’s ZTA framework. You will work in the Risk & Policy Pod, supporting Task 4 subtasks and ensuring evidence alignment for authorization readiness.

You will manage CSAM mappings, perform control gap scoring, and develop templates for SSP/SAP/SAR/POA&M while maintaining the ZTA library. This role requires federal RMF/A&A experience and relevant certifications.

Qualifications

• Bachelor's degree plus 4+ years RMF/A&A experience in a federal environment.
• Working knowledge of NIST SP 800-37 Rev 2, 800-53 Rev 5, 800-53A, and FISMA.
• Hands-on POA&M management and experience with CSAM or a comparable GRC tool.
• Security+ or CAP/CGRC certification.
• Current T2 (BI) or higher federal background investigation, acceptable through reciprocity.

Responsibilities

• Pull the CSAM inventory and map the control set of NIH's 72 FISMA-registered systems.
• Score residual gaps by FIPS 199 impact, data sensitivity, and internet exposure.
• Support the Task 4 pipeline baseline: time per phase, rework loops, inherited vs re-documented controls.
• Build the ZTA Overlay mappings and evidence expectations, tagging each control as central, hybrid, or system-specific.
• Maintain records in the NIH ZTA control library.
• Develop SSP/SAP/SAR/POA&M templates and continuous-monitoring cadences for three authorization tiers.
• Keep NIH OCIO ZTA Wiki content current and answer control questions.

Skills

RMF/A&A experience

NIST SP 800-37 Rev 2, 800-53 Rev 5, (

CSAM/GRC tooling

Security+ or CAP/CGRC

Education

Bachelor's degree

Tools

CSAM

Xacta

RSA/SGRC Archer

ServiceNow

Excel

Power BI

Confluence/SharePoint

Job description

eTel is seeking a specialist to map NIH FISMA systems to Zero Trust controls within NIH’s ZTA framework. You will work in the Risk & Policy Pod, supporting Task 4 subtasks and ensuring evidence alignment for authorization readiness.

You will manage CSAM mappings, perform control gap scoring, and develop templates for SSP/SAP/SAR/POA&M while maintaining the ZTA library. This role requires federal RMF/A&A experience and relevant certifications.