FedRAMP Systems Analyst

View full description

Requirements:

• US Citizenship with the ability to obtain a Public Trust.
• FedRAMP experience, including successful completion of products through FedRAMP certification.
• Working knowledge of software development life cycle (SDLC) for SaaS applications.
• Excellent verbal and written communication skills.
• Strong analytical and problem-solving skills.
• Experience in developing cross-functional teams to achieve program objectives.
• 3 or more years of experience with the FedRAMP Authorization program.
• Experience with NIST 800-53, FISMA, DoD ILs, DISA SRGs, and STIGs.
• Experience with JIRA/Confluence, continuous monitoring, third-party assessments, and audit management.
• Experience with vulnerability management and security tools.

Responsibilities:

• Assist in the preparation and review of FedRAMP documentation, including System Security Plans (SSP) and Security Assessment Reports (SAR).
• Document security findings, vulnerabilities, and compliance status in accordance with FedRAMP guidelines.
• Identify, remediate, and communicate technical and program risks.
• Aid in managing technical and program changes for stakeholders.
• Gather and report program and technical metrics.
• Manage the FedRAMP Baseline (BL) and Impact Level (IL) development roadmap.
• Facilitate relationships with the 3PAO, sponsoring agency, and FedRAMP PMO.
• Understand security assessments, POA&M creation, and Continuous Monitoring (ConMon) requirements.
• Analyze security controls to align with FedRAMP standards.
• Collaborate with process owners to prioritize projects to reduce risk.