Senior InfoSec Analyst - RMF Expert (Hybrid/Remote)

DSA; Fairfax (VA); Hybrid; USD 105,000 - 115,000; Full time

Job summary

DSA is hiring a Senior Information Assurance Analyst to support a large civilian Federal agency in the DC Metro area on a HYBRID schedule. The role focuses on RMF, NIST controls, and governance with a strong emphasis on data analysis and stakeholder advisory capabilities.

The position requires a Bachelor's degree in IT or related field with 8 years of IA experience (CISSP can substitute for 2 years). Telework is approved with onsite presence weekly for core hours 8am-5pm EST.

Qualifications

• Bachelor's degree in information technology or related field.
• 8 years of relevant IA experience; security certification (e.g., CISSP) can substitute for 2 years of experience.
• Strong data analysis skills.
• Excellent written and verbal communication skills.
• In-depth knowledge of applying, selecting and testing NIST 800-53 Rev 5 security controls.
• In-depth knowledge of NIST 800-37 Risk Management Framework.
• Experience with Governance, Risk and Compliance tools (Xacta, RSA Archer, CSAM or eMASS).
• Excellent attention to detail.
• Ability to handle and prioritize multiple tasks and deadlines.

Responsibilities

• Advise senior-level stakeholders on InfoSec initiatives including compliance, awareness and training, and security operations.
• Lead Independent Validation and Verification (IV&V) efforts on security authorization/ATO packages to ensure compliance with agency requirements.
• Leverage the GRC tool (Xacta or alternatives) to track and reconcile findings from assessments, audits, and vulnerability scans.
• Coordinate government data calls (FISMA, FMFIA, BDR) and monthly reports.
• Assess effectiveness of the InfoSec and privacy training program and lead data-driven metrics reporting.
• Manage InfoSec Program POA&Ms and advise on remediation efforts.
• Collaborate with agency security officials, system owners, ISSOs and other stakeholders to implement security solutions.
• Identify opportunities for efficiencies and innovative approaches in processes.
• Participate in team problem solving and propose client solutions.
• Conduct research, data analysis, and develop enterprise-level reports.

Skills

Data analysis

Written communication

Verbal communication

NIST 800-53 Rev 5

NIST RMF 800-37

GRC tools

Attention to detail

Task prioritization

Education

Bachelor's degree in information technology or related field

Tools

Xacta

RSA Archer

CSAM

eMASS

Job description

DSA is hiring a Senior Information Assurance Analyst to support a large civilian Federal agency in the DC Metro area on a HYBRID schedule. The role focuses on RMF, NIST controls, and governance with a strong emphasis on data analysis and stakeholder advisory capabilities.

The position requires a Bachelor's degree in IT or related field with 8 years of IA experience (CISSP can substitute for 2 years). Telework is approved with onsite presence weekly for core hours 8am-5pm EST.