RMF CSAM Analyst

Job Summary

To support the secure operation of a cloud-based IAM solution, the full-time RMF CSAM Analyst will ensure continuous security authorization and compliance through the Risk Management Framework (RMF) and Cyber Security Assessment and Management (CSAM) tool while working remotely.

Key responsibilities

• Ensure compliance with FedRAMP requirements, OMB M-24-15 guidance, and NIST SP 800-63 Digital Identity Guidelines
• Manage security controls, track and remediate Plan of Action and Milestones (POA&M) items, and support FISMA reporting
• Support supply chain risk management, data planning, and maintain documentation to sustain the Authority to Operate (ATO)

Required qualifications

• Strong knowledge of NIST Risk Management Framework (RMF) and CSAM tool
• Experience with FedRAMP, FISMA, and security control inheritance
• Familiarity with NIST SP 800-63 and OMB M-21-31 cloud security requirements
• Proficiency with Microsoft Office tools and compliance tracking systems
• Commitment to maintaining high cybersecurity standards in a federal environment