This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for an Information Assurance / Cyber Security Analyst based in the United States.
The Information Assurance / Cyber Security Analyst will support federal information security initiatives by guiding system teams through authorization processes, security assessments, and regulatory compliance requirements. This remote role focuses on developing and reviewing Authorization to Operate (ATO) documentation, evaluating security controls, and maintaining compliance with federal cybersecurity standards. The successful candidate will work closely with system owners, technical teams, and leadership to identify compliance gaps, manage remediation plans, and ensure authorization requirements are met. Using expertise in the Risk Management Framework (RMF), NIST standards, and the eMASS governance platform, the analyst will help strengthen security posture across complex IT environments. The position combines technical analysis, documentation, stakeholder engagement, and project coordination, with periodic on-site meetings at Picatinny Arsenal, New Jersey. Candidates must be U.S. citizens with an active Secret security clearance and relevant professional certifications.
Accountabilities
-
Develop and maintain Authorization to Operate (ATO) packages in collaboration with system owners and relevant stakeholders.
-
Conduct Assessment Procedure (AP) testing and evaluations to assess the implementation and effectiveness of security controls.
-
Review and contribute to security control implementation statements, ensuring they align with applicable authorization requirements.
-
Work with system teams to review, update, and create Plans of Action and Milestones (POA&Ms), supporting the resolution of identified security and compliance gaps.
-
Guide system teams in navigating the Enterprise Mission Assurance Support Service (eMASS) governance, risk, and compliance tool.
-
Support system authorization processes, security artifact development, control implementation documentation, and POA&M management.
-
Provide guidance throughout each stage of the Risk Management Framework (RMF) process and associated eMASS workflows.
-
Analyze and develop authorization documents, policies, standard operating procedures (SOPs), POA&Ms, and related artifacts to identify gaps and establish remediation schedules.
-
Coordinate directly with system stakeholders to address outstanding authorization requirements and execute activities in accordance with established procedures.
-
Review and develop security artifacts that meet Department of Defense (DoD) authorization and compliance requirements, mapping documentation to applicable NIST SP 800-53 controls.
-
Communicate authorization requirements and technical security findings clearly to staff, system teams, and leadership.
-
Facilitate stakeholder meetings, maintain client relationships, and coordinate activities needed to advance authorization and compliance efforts.
-
Bachelor's degree in a STEM discipline or a related field.
-
At least 10 years of recent experience performing information assurance, cybersecurity, authorization, and compliance responsibilities relevant to this position.
-
Demonstrated experience with Authorization to Operate (ATO) and Interim Authorization to Operate (IATO) processes, the Risk Management Framework (RMF), and NIST SP 800-53 Revision 4.
-
Familiarity with SAP financial systems, STIG Viewer, federal IT and cloud security policies, and the eMASS governance, risk, and compliance platform.
-
Experience with Platform as a Service (PaaS), Software as a Service (SaaS), and Infrastructure as a Service (IaaS) environments, as well as FedRAMP and AWS GovCloud.
-
Understanding of network and server topologies, configurations, security controls, and authorization documentation requirements.
-
Active professional certification in at least one of the following: CISSP, CISA, CAP, CISM, or CRISC.
-
U.S. citizenship and an active Secret security clearance are mandatory.
-
Ability to work remotely while attending periodic on-site meetings at Picatinny Arsenal, New Jersey.
-
Strong analytical and documentation skills, with the ability to identify compliance gaps, evaluate security requirements, and develop actionable remediation plans.
-
Effective communication and stakeholder management skills, including the ability to explain technical authorization requirements to audiences with varying levels of technical expertise.
-
Ability to coordinate multiple activities, facilitate meetings, and collaborate with system owners and technical teams to achieve authorization milestones.
-
Salary range: $125,000–$130,000 per year.
-
Work arrangement: Remote, with periodic on-site meetings at Picatinny Arsenal, New Jersey.
-
Professional scope: Opportunity to contribute to federal cybersecurity, information assurance, and authorization initiatives.
-
Healthcare coverage, retirement plans, paid time off, and other employee benefits were not specified in the provided job description.