Senior RMF & ATO Security Analyst

STAFFXPERT LLC; United States; On-site; USD 120,000 - 180,000; Full time

Job summary

STAFFXPERT LLC is seeking a Senior ISSO Security Analyst to support RMF-based security programs for our client in the United States. This role focuses on leading RMF activities, maintaining security documentation, and ensuring compliance across the authorization lifecycle.

The ideal candidate brings deep RMF and NIST SP 800-53 expertise, experience with ATO processes, and a proven ability to coordinate with system owners, security teams, and stakeholders to mitigate risks throughout system

Qualifications

• Bachelor's degree in CS, electronics, or related field with 10+ years IT experience; or 18+ years IT experience in lieu of degree.
• Proven experience supporting all phases of the RMF process.
• Strong knowledge of NIST SP 800-53 security controls, federal security compliance requirements, and authorization processes.
• Experience creating, updating, and maintaining security artifacts, FISMA documentation, control implementation details, and POA&Ms.
• Experience developing secure implementation plans for system deployments, upgrades, and lifecycle management activities.
• Ability to assess authorization documentation, identify compliance gaps, and coordinate remediation efforts with stakeholders.
• Strong organizational skills with the ability to manage multiple systems, datasets, and compliance deadlines concurrently.
• Demonstrated ability to independently lead meetings and present security and authorization topics to clients and stakeholders.
• Ability to obtain and maintain required government suitability or public trust determinations.

Responsibilities

• Lead and support RMF activities across all phases of the authorization lifecycle, including ATO preparation, maintenance, and continuous compliance efforts.
• Collaborate with system owners, security personnel, and stakeholders to ensure security requirements are effectively implemented and maintained.
• Develop, review, and maintain security documentation, including security plans, risk assessments, POA&Ms, and other compliance-related artifacts.
• Evaluate security controls and ensure alignment with applicable federal cybersecurity standards and policies.
• Identify security gaps, risks, and compliance issues, and work with stakeholders to develop and implement mitigation strategies.
• Analyze authorization packages and supporting documentation to ensure completeness and compliance with established requirements.
• Coordinate security activities related to system changes, product installations, deployments, and decommissioning efforts.
• Track security deliverables, milestones, and timelines while managing multiple systems and compliance requirements simultaneously.
• Facilitate client-facing meetings and communicate complex security concepts to technical and non-technical audiences.
• Provide cybersecurity subject matter expertise and recommendations to support informed security and risk management decisions.

Skills

RMF expertise

NIST SP 800-53 knowledge

Security documentation

Stakeholder communication

Project leadership

Remediation coordination

Governments suitability

Multisystem management

ATO processes

Education

Bachelor's degree or 18+ years IT experience

Job description

STAFFXPERT LLC is seeking a Senior ISSO Security Analyst to support RMF-based security programs for our client in the United States. This role focuses on leading RMF activities, maintaining security documentation, and ensuring compliance across the authorization lifecycle.

The ideal candidate brings deep RMF and NIST SP 800-53 expertise, experience with ATO processes, and a proven ability to coordinate with system owners, security teams, and stakeholders to mitigate risks throughout system