A&A Analyst
Location: Remote
Compensation: Salary
Reviewed: Fri, Oct 02, 2026
This job expires in: 30 days
Job Summary
To support the NIH's Governance, Risk & Compliance efforts, the full-time hybrid A&A Analyst will map FISMA systems to Zero Trust controls, manage control inventories, and develop authorization package templates while working 1-2 days per week onsite in Bethesda, MD.
Key responsibilities
- Map NIH's FISMA systems to the Zero Trust controls and maintain records in the NIH ZTA control library
- Score residual gaps based on FIPS 199 impact, data sensitivity, and internet exposure
- Develop authorization package templates and continuous-monitoring cadences for the three authorization tiers
Required qualifications
- US Citizenship required
- 4+ years of RMF/A&A experience in a federal environment
- Working knowledge of NIST SP 800-37 Rev 2, 800-53 Rev 5, 800-53A, and FISMA
- Bachelor's degree
- Security+ or CAP/CGRC certification
Complete Job Description
The complete job description is available to members. Premium membership includes:
Full access to 41,560 remote jobs from human-vetted companies, updated daily
Resume Builder - AI-powered tool to craft, enhance, and tailor your resume to a specific job
Twice-monthly live group coaching and the full Remote Career Center
20% member discount on Career Services
Backed by a 30-day money-back guarantee