Senior RMF & FISMA Cybersecurity Analyst

KeyLogic, LLC; Washington (District of Columbia); On-site; USD 162,000 - 198,000; Full time

Job summary

KeyLogic, LLC seeks a Senior Cybersecurity Analyst to provide governance, assessment, and compliance support across Department of the Air Force enterprise environments, focusing on RMF, FISMA compliance, and executive cyber risk reporting.

You will lead RMF package readiness, review SSPs/SARs/POA&M, and perform cybersecurity assessments. Prepare executive briefings and metrics for leadership, ensuring control effectiveness and risk visibility.

Qualifications

• Active Top Secret clearance or higher.
• 18+ years of progressive experience in cybersecurity.
• Experience with RMF and FISMA compliance programs.
• Strong executive communication skills.
• IAM Level III experience is preferred.

Responsibilities

• Lead or oversee RMF package readiness, authorization evidence, ATO/ATC actions, AO/SCA coordination, and continuous-monitoring activities.
• Review SSPs, SARs, POA&M, vulnerability/configuration evidence, inherited controls, and authorization dependencies for completeness and technical credibility.
• Conduct cybersecurity assessments and control evaluations.
• Support RMF authorization and continuous monitoring activities.
• Analyze compliance against DoD, NIST, and federal cybersecurity standards.
• Develop risk analyses, findings, and recommendations.
• Support cybersecurity governance forums and working groups.
• Prepare executive briefings, reports, and metrics.
• Evaluate emerging cybersecurity requirements and impacts.

Skills

Top Secret clearance

18+ years experience

RMF

FISMA

Executive communication

IAM Level III

CISSP / CISM

Education

Master's degree in a relevant field

Job description

KeyLogic, LLC seeks a Senior Cybersecurity Analyst to provide governance, assessment, and compliance support across Department of the Air Force enterprise environments, focusing on RMF, FISMA compliance, and executive cyber risk reporting.

You will lead RMF package readiness, review SSPs/SARs/POA&M, and perform cybersecurity assessments. Prepare executive briefings and metrics for leadership, ensuring control effectiveness and risk visibility.