Senior Continuous Monitoring Analyst — RMF & GRC Expert

Rividium Inc; Washington (District of Columbia); On-site; USD 130,000 - 170,000; Full time

Job summary

RiVidium Inc. seeks a Senior Continuous Monitoring (ConMon) Analyst to support federal cybersecurity and RMF activities. The role focuses on continuous monitoring, security assessments, and risk analysis to keep systems compliant with federal requirements.

The candidate will coordinate with ISSOs/ISSMs/SCAs, review control implementations, manage POA&Ms, and maintain cybersecurity documentation using GRC tools. A strong background in RMF and NIST standards is required.

Qualifications

• Bachelor's degree in Cybersecurity, Information Systems, Computer Science, Information Assurance, or a related field.
• Experience supporting cybersecurity, continuous monitoring, RMF, security compliance, or information assurance programs.
• Strong understanding of RMF and NIST cybersecurity standards.
• Experience with security controls, security assessments, vulnerability management, risk management, and POA&M tracking.

Responsibilities

• Perform continuous monitoring of information systems to identify changes in security posture, vulnerabilities, risks, and compliance status.
• Support implementation and execution of Continuous Monitoring (ConMon) strategies in accordance with federal cybersecurity requirements and organizational policies.
• Monitor security controls and assess ongoing control effectiveness through documentation reviews, technical evidence, vulnerability data, and other assessment activities.
• Support RMF activities throughout the system lifecycle.
• Review security controls, assessment results, system changes, vulnerabilities, and security-related artifacts to identify potential risks and compliance gaps.
• Track, analyze, and report security weaknesses, vulnerabilities, and POA&Ms.
• Coordinate with ISSOs, ISSMs, SCAs, system owners, and technical teams to ensure identified deficiencies are remediated.

Skills

RMF

NIST 800-53

Continuous Monitoring

Vulnerability Management

POA&M management

Security Controls

Security Documentation

Stakeholder Coordination

GRC tools

Risk Assessment

Education

Bachelor's degree in Cybersecurity, Information Systems, CS, Information Assurance, or related field

Tools

RSA Archer

ServiceNow GRC

eMASS

Job description

RiVidium Inc. seeks a Senior Continuous Monitoring (ConMon) Analyst to support federal cybersecurity and RMF activities. The role focuses on continuous monitoring, security assessments, and risk analysis to keep systems compliant with federal requirements.

The candidate will coordinate with ISSOs/ISSMs/SCAs, review control implementations, manage POA&Ms, and maintain cybersecurity documentation using GRC tools. A strong background in RMF and NIST standards is required.