Senior RMF/GRC Cyber Security Analyst (FISMA & ATO)

Infosys Limited; Rockville (MD); On-site; USD 119,000 - 221,000; Full time

Benefits offered by this job

Medical/Dental/Vision/Life Insurance

Disability coverage

401(k) plan and contributions

Paid holidays & PTO

Job summary

Infosys Public Services in Rockville, MD seeks a Cyber Security Analyst with deep expertise in RMF, GRC, and ATO processes for U.S. federal and state environments.

You will assess security posture, conduct risk assessments, identify gaps, and help prepare authorization artifacts across frameworks like NIST SP 800-53/171 and FedRAMP. Responsibilities include security documentation, risk management, and collaboration with ISSOs, auditors, and delivery teams to ensure continuous monitoring and

Qualifications

• 11+ years of cybersecurity experience in federal or regulated public-sector environments.
• Strong experience with NIST RMF, FISMA, Security Assessment and Authorization, ATO processes.
• Experience with RMF lifecycle, control assessments, and continuous monitoring.
• Ability to produce SSPs, SAPs, SARs, POA&Ms, risk assessments, and authorization artifacts.

Responsibilities

• Support RMF lifecycle activities, security authorization packages, and POAMs.
• Conduct security risk assessments and document control effectiveness and deficiencies.
• Collaborate with System Owners, ISSOs, ISSMs, auditors, and government stakeholders.
• Assist in cloud security configurations and government compliance activities.

Skills

GRC & RMF experience

NIST SP 800-53/800-171

Incident management

Vulnerability management

Cloud security

Zero Trust

IAM

Security Operations

Auditing/assessments

Education

Bachelor's degree

Tools

Microsoft Azure

AWS

Job description

Infosys Public Services in Rockville, MD seeks a Cyber Security Analyst with deep expertise in RMF, GRC, and ATO processes for U.S. federal and state environments.

You will assess security posture, conduct risk assessments, identify gaps, and help prepare authorization artifacts across frameworks like NIST SP 800-53/171 and FedRAMP. Responsibilities include security documentation, risk management, and collaboration with ISSOs, auditors, and delivery teams to ensure continuous monitoring and