Continuous Monitoring (ISCM) Analyst

The Continuous Monitoring (ISCM) Analyst runs the monthly control review, SAR, and RAM cycle for the 15 systems in the Ongoing Authorization (OA) program. This position also makes FIPS 199 and Security Impact Analysis determinations and maintains the TRAL. The minimum 4 years of experience reflects the need for consistent, on-time delivery of recurring monthly deliverables.

Responsibilities

• Performs monthly control reviews and produces monthly SARs.

• Prepares Risk Assessment Memos (RAMs).

• Makes FIPS 199 and Security Impact Analysis determinations.

• Maintains the TRAL for the 15 OA systems.

• Keeps the monthly control review, SAR, and RAM cycle on schedule.

• Other duties as assigned.

• BA/BS degree in Cybersecurity, Information Technology, or a related discipline.

• Minimum Experience Required:

• Minimum 4 years of experience in continuous monitoring, security assessment, or RMF.

• Demonstrated knowledge of NIST SP 800-137 (ISCM) and NIST SP 800-53.

• Demonstrated experience with GRC tools such as CSAM or JCAM.

Additional Experience:

Security+, CySA+, or CGRC certification.

Big Impact Tech (BIT) is a Small Business providing IT and business management consulting to federal and commercial clients. We deliver mission-focused solutions in data, cloud, cybersecurity, and program management.