Security Analyst II: RMF & Compliance Focus

Sacramento Native American Health Center, Inc; Clearfield (UT); On-site; USD 75,000 - 85,000; Full time

Benefits offered by this job

Health coverage

Dental coverage

Vision coverage

Life insurance

401(k) with company match

Paid holidays

Job summary

ISSE Services is seeking a Security Analyst II to implement and manage RMF controls for assigned information systems, coordinating with the ISSM to ensure compliance with NIST RMF SP 800-37 and SP 800-53. The role includes maintaining RMF documentation and monitoring vulnerabilities.

You will support ATO activities, coordinate with admins and security teams, and advise leadership on risk mitigation while ensuring operational security across the environment.

Qualifications

• Bachelor’s degree in Cybersecurity, CS, IT, or related field.
• 2-7 years in cybersecurity.
• Audit/compliance experience.
• Practical System Administration experience.
• Strong analytical, communication, and leadership skills.

Responsibilities

• Implement and manage RMF 800-53r5 security controls for assigned information systems in coordination with ISSM.
• Assist ISSM maintain RMF artifacts (SSP, POA&M, SAR, continuous monitoring reports).
• Support system authorization (ATO) and reauthorization activities.
• Monitor system security posture and ensure policy compliance.
• Coordinate vulnerability scanning, patching, and remediation efforts.
• Support security audits, inspections, and assessments.
• Ensure security incidents are reported per policy.
• Advise leadership on system risks and mitigations.

Skills

RMF 800-53r5

Vulnerability assessment

Policy compliance

Audit coordination

Communication

Leadership

Education

Bachelor’s degree in Cybersecurity, CS, IT

Tools

SSP

POA&M

SAR

RMF artifacts

Job description

ISSE Services is seeking a Security Analyst II to implement and manage RMF controls for assigned information systems, coordinating with the ISSM to ensure compliance with NIST RMF SP 800-37 and SP 800-53. The role includes maintaining RMF documentation and monitoring vulnerabilities.

You will support ATO activities, coordinate with admins and security teams, and advise leadership on risk mitigation while ensuring operational security across the environment.