{"schemaVersion":"jobsearcher.job.v1","id":"db58f91ceaf5c215b98ef1be","url":"https://jobsearcher.com/jobs/db58f91ceaf5c215b98ef1be","canonicalUrl":"https://jobsearcher.com/jobs/db58f91ceaf5c215b98ef1be","title":"FCC - Security Compliance / RMF Analyst","description":"cFocus Software seeks a Security Compliance / RMF Analyst to join our program supporting the Federal Communications Commission (FCC). This position is remote. This position requires the ability a Public Trust clearance.Qualifications:Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or related field (or equivalent experience).Experience in cybersecurity compliance, RMF, risk management, or related environments.Demonstrated experience supporting enterprise-level cybersecurity or compliance programs.Experience working in complex IT environments with federal or regulated systems.Strong knowledge of NIST RMF (SP 800-37) and NIST SP 800-53 controls.Experience with A&A, ATO processes, and continuous monitoring.Familiarity with GRC tools (e.g., Archer, Xacta, CSAM).Experience with vulnerability management and risk prioritization.Strong documentation and technical writing skills.Analytical and problem-solving capabilities.Ability to communicate effectively with technical and non-technical stakeholdersRequired CertificationsRole-appropriate cybersecurity certification demonstrating competency in compliance, RMF, or risk management.Examples include: Security+, CISA, CISSP (or equivalent certifications aligned with role responsibilities). Duties: Support RMF lifecycle activities including system authorization, reauthorization, and continuous monitoring.Develop, maintain, and update security documentation (SSPs, SARs, POA&Ms, contingency plans).Perform security control assessments (SCA) and control validation activities.Track and manage POA&Ms, vulnerabilities, and remediation activities.Conduct risk assessments, gap analyses, and compliance reviews.Support FISMA, NIST SP 800-53, and other federal compliance requirements.Coordinate with system owners, ISSOs, engineers, and auditors.Support audit readiness and respond to internal/external audit requests.Maintain RMF artifacts in GRC tools (e.g., Xacta, Archer, ServiceNow).Assist with continuous monitoring, reporting, and compliance metrics development.","company":"Cfocus Software","rawCompany":"cfocus software","city":"Washington","state":"DC","isRemote":false,"isActive":false,"createdAt":"2026-05-06T08:47:02.260Z","occupations":[{"code":"15-1212.00","title":"Information Security Analysts","slug":"information-security-analysts"},{"code":"13-1199.07","title":"Security Management Specialists","slug":"security-management-specialists"},{"code":"11-9199.02","title":"Compliance Managers","slug":"compliance-managers"}],"industries":[{"code":"541512","title":"Computer Systems Design Services","slug":"computer-systems-design-services"},{"code":"541618","title":"Other Management Consulting Services","slug":"other-management-consulting-services"},{"code":"541611","title":"Administrative Management and General Management Consulting Services","slug":"administrative-management-and-general-management-consulting-services"}],"jobPosting":{"@context":"https://schema.org","@type":"JobPosting","title":"FCC - Security Compliance / RMF Analyst","description":"cFocus Software seeks a Security Compliance / RMF Analyst to join our program supporting the Federal Communications Commission (FCC). This position is remote. This position requires the ability a Public Trust clearance.Qualifications:Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or related field (or equivalent experience).Experience in cybersecurity compliance, RMF, risk management, or related environments.Demonstrated experience supporting enterprise-level cybersecurity or compliance programs.Experience working in complex IT environments with federal or regulated systems.Strong knowledge of NIST RMF (SP 800-37) and NIST SP 800-53 controls.Experience with A&A, ATO processes, and continuous monitoring.Familiarity with GRC tools (e.g., Archer, Xacta, CSAM).Experience with vulnerability management and risk prioritization.Strong documentation and technical writing skills.Analytical and problem-solving capabilities.Ability to communicate effectively with technical and non-technical stakeholdersRequired CertificationsRole-appropriate cybersecurity certification demonstrating competency in compliance, RMF, or risk management.Examples include: Security+, CISA, CISSP (or equivalent certifications aligned with role responsibilities). Duties: Support RMF lifecycle activities including system authorization, reauthorization, and continuous monitoring.Develop, maintain, and update security documentation (SSPs, SARs, POA&Ms, contingency plans).Perform security control assessments (SCA) and control validation activities.Track and manage POA&Ms, vulnerabilities, and remediation activities.Conduct risk assessments, gap analyses, and compliance reviews.Support FISMA, NIST SP 800-53, and other federal compliance requirements.Coordinate with system owners, ISSOs, engineers, and auditors.Support audit readiness and respond to internal/external audit requests.Maintain RMF artifacts in GRC tools (e.g., Xacta, Archer, ServiceNow).Assist with continuous monitoring, reporting, and compliance metrics development.","datePosted":"2026-05-06T08:47:02.260Z","dateModified":"2026-05-06T08:47:02.260Z","hiringOrganization":{"@type":"Organization","name":"Cfocus Software","sameAs":"https://jobsearcher.com"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Washington","addressRegion":"DC","addressCountry":"US"}},"identifier":{"@type":"PropertyValue","name":"JobSearcher","value":"db58f91ceaf5c215b98ef1be"},"url":"https://jobsearcher.com/jobs/db58f91ceaf5c215b98ef1be"}}