Senior Cyber Security GRC & RMF Specialist

Infosys; Rockville (MD); On-site; USD 119,000 - 221,000; Full time

Benefits offered by this job

Medical/Dental/Vision/Life Insurance

Long-term/Short-term Disability

Health Reimbursement Accounts

401(k) plan and contributions

Paid holidays plus Paid Time Off

Job summary

Infosys Public Services seeks a Cyber Security Analyst to join our team in Rockville, MD. The role focuses on governance, risk, and compliance (GRC), RMF, SA&A, and ATO activities within federal/state government environments.

You will assess security posture, perform risk assessments, and help prepare authorization artifacts such as SSPs and POA&Ms. The ideal candidate has deep experience with NIST frameworks, FedRAMP, CJIS, and HIPAA-related controls, plus strong collaboration with system

Qualifications

• 11+ years of cybersecurity experience in government or regulated environments.
• Strong experience with NIST RMF, FISMA, SA&A and ATO processes.
• Experience with NIST SP 800-53/800-171, FedRAMP, CJIS, HIPAA/HITECH.
• Ability to develop SSPs, SAPs, SARs, POA&Ms and other artifacts.

Responsibilities

• Assess security posture and conduct security and risk assessments.
• Identify compliance gaps and develop/assess security controls.
• Support remediation and authorization activities aligned with FISMA, NIST SP 800-53, 800-37, 800-171, FedRAMP, CMMC.
• Collaborate with system owners, ISSOs, ISSMs, security architects, cloud and infrastructure teams, auditors/assessors, and government stakeholders.

Skills

NIST RMF

ATO & SA&A

GRC

Cloud security

Zero Trust

IAM

Vulnerability management

Security operations

Incident management

Federal compliance

FISMA

NIST 800-53/800-171

Education

Bachelor's degree

Job description

Infosys Public Services seeks a Cyber Security Analyst to join our team in Rockville, MD. The role focuses on governance, risk, and compliance (GRC), RMF, SA&A, and ATO activities within federal/state government environments.

You will assess security posture, perform risk assessments, and help prepare authorization artifacts such as SSPs and POA&Ms. The ideal candidate has deep experience with NIST frameworks, FedRAMP, CJIS, and HIPAA-related controls, plus strong collaboration with system