> Markdown version of [/jobs/ext/4505536-continuous-monitoring-iscm-analyst](https://www.wearedevelopers.com/jobs/ext/4505536-continuous-monitoring-iscm-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Continuous Monitoring (ISCM) Analyst

- **Company:** Big Impact Tech (BIT)
- **Location:** Baltimore, MD, United States
- **Experience:** Experienced
- **Contract:** Permanent contract
- **Skills:** Cyber Security, Federal Information Processing Standards (FIPS), Smartsuite, Reliability Availability Maintainability and Safety Software, SARS Software Products, Information Technology
- **Published:** November 2, 2026
- **Apply:** https://www.juju.com/job/18_2757_50155261

## About the Role

* BA/BS degree in Cybersecurity, Information Technology, or a related discipline.

 * Minimum Experience Required:

 * Minimum 4 years of experience in continuous monitoring, security assessment, or RMF.

 * Demonstrated knowledge of NIST SP 800-137 (ISCM) and NIST SP 800-53.

 * Demonstrated experience with GRC tools such as CSAM or JCAM.

Additional Experience:

Security+, CySA+, or CGRC certification.

## Description

The Continuous Monitoring (ISCM) Analyst runs the monthly control review, SAR, and RAM cycle for the 15 systems in the Ongoing Authorization (OA) program. This position also makes FIPS 199 and Security Impact Analysis determinations and maintains the TRAL. The minimum 4 years of experience reflects the need for consistent, on-time delivery of recurring monthly deliverables.

Responsibilities

 * Performs monthly control reviews and produces monthly SARs.

 * Prepares Risk Assessment Memos (RAMs).

 * Makes FIPS 199 and Security Impact Analysis determinations.

 * Maintains the TRAL for the 15 OA systems.

 * Keeps the monthly control review, SAR, and RAM cycle on schedule.

 * Other duties as assigned.