Back to results

RMF Quality Gate Analyst

  • Reston, VA, United States
Apply on recruiting.ultipro.com About employer

Applications open in a new tab.

Job details

Posting language
English
Posted

Original job description

***AWARD PENDING***

Zen Strategics, a Titan Technologies company, is seeking an RMF Quality Gate Analyst to support TSA's Governance, Risk, and Compliance (GRC) mission. The position will assist in safeguarding the availability, integrity, and confidentiality of information systems through cybersecurity governance, risk management, security assessment, and compliance activities that support TSA's Information Assurance and Cybersecurity Division.

Duties and Responsibilities:

  • Conduct quality gate reviews for RMF activities and provide compliance recommendations to support authorization and risk management efforts.
  • Review RMF documentation, security artifacts, and supporting system records to ensure completeness, accuracy, and alignment with established requirements.
  • Analyze security, privacy, and compliance-related documentation and provide recommendations to stakeholders regarding findings, risks, and required updates.
  • Review Requests for Change (RFCs), Security Impact Assessments (SIAs), and proposed system changes to evaluate potential cybersecurity impacts.
  • Support the development, review, and improvement of Security Authorization (SA) and Ongoing Authorization (OA) procedures and processes.
  • Assess emerging technologies, technical implementations, and system designs for compliance with cybersecurity requirements and federal mandates.
  • Support security control assessment activities and standardized processes used to evaluate control effectiveness and compliance.
  • Review network and technical assessment information and collaborate with stakeholders to support cybersecurity risk evaluations.
  • Analyze scan results and assessment data to support compliance monitoring and reporting activities.
  • Document meeting outcomes, recommendations, findings, decisions, and follow-up actions.

You MUST have:

  • Active Secret clearance required; Must be able to obtain TSA clearance
  • Knowledge of the NIST Risk Management Framework (RMF), cybersecurity compliance, and risk management principles.
  • Experience reviewing and validating RMF artifacts, security documentation, and authorization-related deliverables.
  • Experience conducting compliance reviews, risk assessments, and security control evaluations.
  • Ability to analyze technical, security, and governance documentation and provide risk-based recommendations.
  • Experience supporting authorization activities, change reviews, and cybersecurity compliance efforts.
  • Strong analytical, organizational, and communication skills.

It’s GREAT if you also have:

  • Familiarity with Security Authorization (SA) and Ongoing Authorization (OA) processes.
  • Knowledge of NIST Special Publications 800-30, 800-37, and 800-53A.
  • Experience reviewing security plans, contingency plans, configuration management documentation, privacy artifacts, and related RMF deliverables.
  • Familiarity with FISMA compliance activities and cybersecurity assessment processes.
  • Experience evaluating technical designs, implementation approaches, and security architectures for compliance purposes.
  • Knowledge of network assessment activities and technical risk analysis.

Education:

  • BA/BS degree in Cybersecurity, Information Technology, or a related discipline

Company Description:

Titan Technologies, LLC and our wholly owned subsidiaries, TelaForce, LLC, Titan Facilities, Inc. and Zen Strategics, design, build, integrate, and manage innovative solutions and software applications. Our remarkable people, working collaboratively under a shared vision, have earned a reputation with our customers for delivering results with maximum impact. Sound intriguing? Consider Titan Technologies for the next step in your career journey and be part of an impactful team!

Titan is proud to be a Service-Disabled Veteran Owned Business.

More about this job

Skills

  • Confidentiality
  • Cybersecurity
  • Risk management
  • Regulatory compliance
  • Documentation
  • Negotiate with stakeholders
  • Reporting
  • Communication skills
  • Computer technology

Report this job

Get in touch
MovoJobs

Contact us