Senior ConMon Analyst – RMF & Compliance Lead

Rividium; Washington (District of Columbia); On-site; USD 120,000 - 170,000; Full time

Job summary

RiVidium Inc. seeks a Senior Continuous Monitoring (ConMon) Analyst to support federal cybersecurity and RMF activities.

The role focuses on continuous monitoring, security assessments, risk analysis, and compliance documentation to keep systems aligned with federal requirements. The successful candidate will work with ISSOs/ISSMs/SCAs, manage POA&Ms, and coordinate with government stakeholders to ensure effective remediation and reporting.

Qualifications

• Bachelor’s degree in Cybersecurity, Information Systems, Computer Science, Information Assurance, or related field.
• Demonstrated experience supporting cybersecurity, continuous monitoring, RMF, security compliance, or information assurance programs.
• Strong understanding of RMF and NIST cybersecurity standards.
• Experience with security controls, assessments, vulnerability management, risk management, and POA&M tracking.
• Experience analyzing security documentation and technical evidence to determine control compliance.
• Experience working with ISSOs, ISSMs, SCAs, system owners, and engineers.
• Strong written and verbal communication for technical and executive reports.
• Ability to manage multiple systems and findings in a federal environment.

Responsibilities

• Perform continuous monitoring to identify changes in security posture, vulnerabilities, risks, and compliance status.
• Support implementation and execution of ConMon strategies per federal requirements and policies.
• Monitor security controls and assess control effectiveness via reviews, evidence, and data.
• Support RMF activities throughout the system lifecycle.
• Review assessment results, changes, vulnerabilities, and artifacts to identify risks and gaps.
• Track and report weaknesses, vulnerabilities, and POA&Ms.
• Coordinate with ISSOs/ISSMs/SCAs and technical teams to remediate deficiencies.
• Maintain and update cybersecurity documentation including evidence and POA&Ms.
• Review vulnerability scan results to assess impact on security posture.
• Assist with security impact analyses for changes and new technologies.
• Prepare recurring security/compliance reports for leadership.
• Analyze metrics to identify recurring weaknesses and mitigation strategies.
• Support testing and validation of controls as required.
• Ensure monitoring activities align with policies and regulations.
• Use GRC and cybersecurity tools to maintain security information and compliance docs.
• Participate in working groups and risk reviews with stakeholders.
• Provide recommendations to improve processes and posture.
• Stay current on federal policies, guidance, threats, and best practices.

Skills

RMF

ConMon

NIST 800-53

A&A

ATO

POAM management

Vulnerability management

Risk assessment

Security control assessment

GRC tools

Cybersecurity compliance

Security documentation

Security metrics & reporting

Federal cybersecurity policies & STDS

Education

Bachelor’s degree in Cybersecurity, Information Systems, Computer Science, Information Assurance, or related field

Tools

RSA Archer

ServiceNow GRC

eMASS

Job description

RiVidium Inc. seeks a Senior Continuous Monitoring (ConMon) Analyst to support federal cybersecurity and RMF activities.

The role focuses on continuous monitoring, security assessments, risk analysis, and compliance documentation to keep systems aligned with federal requirements. The successful candidate will work with ISSOs/ISSMs/SCAs, manage POA&Ms, and coordinate with government stakeholders to ensure effective remediation and reporting.