Security & Compliance Analyst — RMF/NIST Expert

Abacus Solutions Group, LLC; San Antonio (TX); On-site; USD 90,000 - 120,000; Full time

Job summary

Abacus Solutions Group, LLC is seeking a cybersecurity professional to ensure the safety of information systems by applying RMF and NIST standards. You will coordinate authorization activities, conduct risk assessments, and monitor security controls across systems, networks, and databases.

A BA/BS and industry certifications are required, with strong focus on CISA, CISM, CISSP, or CAP. You will work with IT teams and management to maintain security compliance, perform vulnerability assessments,

Qualifications

• Must have strong Certification & Authorization foundation.
• Solid working knowledge of RMF and NIST publications.
• Experience coordinating security assessments and authorization activities.

Responsibilities

• Develop and coordinate all authorization documentation (System Categorization, System Security Plan, risk assessment).
• Support control assessment, reporting and monitoring processes.
• Coordinate DoS liaison to provide POA&M status.
• Assist in remediation and ensure POA&Ms are managed.
• Update Business Continuity and Contingency planning.
• Conduct vulnerability scanning and provide reports and metrics.
• Review SA&A documentation and security infrastructure.
• Assess NIST 800-53 controls and document results.
• Perform risk assessments and develop POA&Ms from weaknesses.
• Monitor IDS for security issues and remediation.

Skills

Certification & Authorization

RMF

NIST guidance

Education

BA/BS or equivalent

Job description

Abacus Solutions Group, LLC is seeking a cybersecurity professional to ensure the safety of information systems by applying RMF and NIST standards. You will coordinate authorization activities, conduct risk assessments, and monitor security controls across systems, networks, and databases.

A BA/BS and industry certifications are required, with strong focus on CISA, CISM, CISSP, or CAP. You will work with IT teams and management to maintain security compliance, perform vulnerability assessments,