RMF CSAM Analyst (1)

Summary

To support the secure operation of a cloud-based IAM solution, the full-time RMF CSAM Analyst will ensure continuous security authorization and compliance through the Risk Management Framework (RMF) and Cyber Security Assessment and Management (CSAM) tool while working remotely.Key responsibilitiesEnsure compliance with FedRAMP requirements, OMB M-24-15 guidance, and NIST SP 800-63 Digital Identity GuidelinesManage security controls, track and remediate Plan of Action and Milestones (POA&M) items, and support FISMA reportingSupport supply chain risk management, data planning, and maintain documentation to sustain the Authority to Operate (ATO)Required qualificationsStrong knowledge of NIST Risk Management Framework (RMF) and CSAM toolExperience with FedRAMP, FISMA, and security control inheritanceFamiliarity with NIST SP 800-63 and OMB M-21-31 cloud security requirementsProficiency with Microsoft Office tools and compliance tracking systemsCommitment to maintaining high cybersecurity standards in a federal environment

Job Description

To support the secure operation of a cloud-based IAM solution, the full-time RMF CSAM Analyst will ensure continuous security authorization and compliance through the Risk Management Framework (RMF) and Cyber Security Assessment and Management (CSAM) tool while working remotely.Key responsibilitiesEnsure compliance with FedRAMP requirements, OMB M-24-15 guidance, and NIST SP 800-63 Digital Identity GuidelinesManage security controls, track and remediate Plan of Action and Milestones (POA&M) items, and support FISMA reportingSupport supply chain risk management, data planning, and maintain documentation to sustain the Authority to Operate (ATO)Required qualificationsStrong knowledge of NIST Risk Management Framework (RMF) and CSAM toolExperience with FedRAMP, FISMA, and security control inheritanceFamiliarity with NIST SP 800-63 and OMB M-21-31 cloud security requirementsProficiency with Microsoft Office tools and compliance tracking systemsCommitment to maintaining high cybersecurity standards in a federal environment