RMF/ISSO Analyst
DecisionPoint Corporation
Posted: 10/21/2026Cyber Security
Senior Grid & Interconnection Analyst
Solar Provider Group
Posted: 10/21/2026PythonRTOSSQL
Revenue Analyst
Pancreatic Cancer Action Network
Posted: 10/21/2026ERP
Mortgage Licensing Analyst
eLEND Solutions
Posted: 10/21/2026
Application Analyst I – Full Time – Days – Cupid, Radiant
Cape Fear Valley Health
Posted: 10/21/2026
Credit Analyst
Uline
Posted: 10/21/2026Credit Analyst
Uline
Posted: 10/21/2026
Senior Quantitative Analytics & Model Development Analyst
PNC
Posted: 10/21/2026PythonSQL
Senior Vulnerability Management, ACAS Response Analyst
DecisionPoint Corporation
Posted: 10/21/2026CloudCyber SecurityServiceNow
Service Performance, SLA Analyst – Journeyman
DecisionPoint Corporation
Posted: 10/21/2026ITSMServiceNowSQLTableau
Vulnerability Management, ACAS Analyst – Journeyman
DecisionPoint Corporation
Posted: 10/21/2026Cyber SecurityServiceNow
Digital Commerce Analyst
WD-40 Company
Posted: 10/21/2026
Demand Planning Analyst
Sonoco
Posted: 10/21/2026Oracle
Program Cost and Schedule Control Analyst
Northrop Grumman
Posted: 10/21/2026
Software Asset Analyst
SAIC
Posted: 10/21/2026ITSMServiceNowSQL
Epic Medical Device Integration Application Analyst II
Mosaic Life Care
Posted: 10/21/2026
Acquisition Analyst
Apogee Engineering, LLC
Posted: 10/21/2026TypeScript
Program Controls Analyst II
Honeywell Aerospace Technologies
Posted: 10/21/2026Program Controls Analyst II
Honeywell Aerospace Technologies
Posted: 10/21/2026
Implementation Analyst – 2nd Shift
GXO Logistics, Inc.
Posted: 10/21/2026RMF/ISSO Analyst
DecisionPoint CorporationCore Competencies
Role fitCore Competencies
Use this summary to align your resume positioning with the role.
Demonstrates expertise in Risk Management Framework (RMF) processes, including the development and maintenance of security documentation, authorization packages, and compliance with DoD cybersecurity policies. Proficient in conducting security assessments, managing Plans of Action and Milestones (POA&Ms), and coordinating with stakeholders to ensure effective cybersecurity practices.
Highest-signal resume keywords
Active Secret ClearanceCompTIA Security+ CertificationExperience With eMASSNIST SP 800-53 Compliance10+ Years Cybersecurity Experience
Tech Stack
Tools & technologiesAbout the role
Key responsibilities & impact- Maintain Risk Management Framework authorization packages and supporting documentation throughout the system authorization lifecycle
- Develop and maintain security-control implementation statements, control evidence, system security documentation, and continuous-monitoring records
- Maintain system-level Plans of Action and Milestones, including findings, remediation actions, milestones, responsible parties, supporting evidence, and closure status
- Develop, review, and maintain system interconnection agreements and related authorization documentation
- Support compliance with the USMEPCOM Tenant Security Plan for the organization’s portion of the DoD Information Network Non-classified Internet Protocol Router Network
- Support Authority to Operate and Authority to Connect package development, review, submission, maintenance, and renewal activities
- Review authorization packages for accuracy, completeness, consistency, and traceability before Government or assessor submission
- Evaluate security-control implementation and evidence against applicable NIST SP 800-53, DoD, Army, and USMEPCOM requirements
- Support security-control testing for USMEPCOM systems, applications, networks, and supporting infrastructure
- Conduct internal authorization-readiness reviews and execute required checks and tests in accordance with the DoD Risk Management Framework
- Develop Security Test and Evaluation test plans addressing applicable NIST, DoD, Army, and USMEPCOM information-system security testing requirements
- Support preparation of at least two Security Test and Evaluation test plans and the resulting testing activities during the task-order period
- Collect, organize, validate, and upload authorization evidence in eMASS or the Government-designated repository
- Maintain traceability among security controls, implementation statements, test results, vulnerabilities, remediation activities, and authorization decisions
- Analyze assessor comments and coordinate responses with system owners, engineers, administrators, developers, and Government cybersecurity personnel
- Resolve documentation deficiencies and ensure assessor comments are addressed with accurate explanations and appropriate supporting evidence
- Monitor authorization conditions, open findings, expiring artifacts, and continuous-monitoring requirements
- Support security-status reporting, risk summaries, authorization schedules, and cybersecurity briefings for Government and program leadership
- Identify authorization risks, evidence gaps, and potential schedule impacts and recommend practical corrective actions
- Protect sensitive cybersecurity documentation and ensure records are handled in accordance with applicable Government requirements
Requirements
What you’ll need- Active Secret clearance or higher
- Bachelor’s degree in Cybersecurity, Information Systems, or a related field
- Minimum of 10 years of relevant cybersecurity, information assurance, RMF, or information-system security experience
- Current CompTIA Security+ certification
- Experience supporting the Department of Defense Risk Management Framework
- Proficiency with eMASS or the Government-designated authorization repository
- Experience performing Information System Security Officer duties in a federal or DoD environment
- Experience supporting Government ISSMs, system owners, Security Control Assessors, Authorizing Officials, or Common Control Providers
- Working knowledge of DoDI 8510.01, NIST SP 800-37, NIST SP 800-53, FISMA, and applicable DoD cybersecurity policies
- Experience developing or maintaining system security plans, control implementation statements, interconnection agreements, continuous-monitoring strategies, and authorization decision documentation
- Experience supporting ATO, ATC, reaccreditation, and ongoing authorization activities
- Experience developing and executing Security Test and Evaluation plans
- Experience conducting security-control assessments, control validation, evidence reviews, and authorization-readiness reviews
- Experience managing system-level POA&Ms and coordinating technical remediation activities
- Familiarity with ACAS or Tenable, STIG Viewer, SCAP tools, Endpoint Security Solutions, or comparable DoD cybersecurity technologies
- Experience maintaining traceable evidence repositories and resolving assessor or audit comments
- Strong technical writing, documentation management, analytical, and stakeholder-coordination skills
- Ability to explain technical security-control deficiencies and authorization risks to both technical and nontechnical stakeholders
Benefits
Comp & perks- Active Secret clearance or higher is required for the role
- Regular full-time employment
ATS Keywords
✓ Tailor your resumeApplicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills
Risk Management Framework (RMF)Security Control AssessmentSystem Security DocumentationPlans of Action and Milestones (POA&Ms)Security Test and Evaluation PlansInformation System Security Officer DutiesContinuous Monitoring StrategiesAuthorization Package DevelopmentControl Implementation StatementsInterconnection Agreements
Soft Skills
Technical WritingDocumentation ManagementAnalytical SkillsStakeholder CoordinationCommunication Skills
Tools & Technologies
EMASSACASTenableSTIG ViewerSCAP ToolsEndpoint Security Solutions
Certifications & Qualifications
CompTIA Security+
Industry Keywords
DoD Cybersecurity PoliciesNIST SP 800-37FISMADoDI 8510.01Authorization to Operate (ATO)Authorization to Connect (ATC)Cybersecurity BriefingsRisk SummariesGovernment ISSMsCommon Control Providers