Risk Management Framework (RMF) Analyst

SteerBridge•Washington, DC

14h

About The Position

SteerBridge Strategies is a modern technology company delivering innovative, mission‑focused solutions to the U.S. Government and private sector. Leveraging deep expertise in federal acquisition, digital transformation, and emerging technologies, we deliver agile, commercial‑grade capabilities that accelerate operational effectiveness and drive measurable mission success. At the core of SteerBridge is our people—especially the veterans whose leadership, problem‑solving mindset, and commitment to excellence elevate every project we support. We don’t simply hire exceptional talent; we cultivate it , creating meaningful career pathways for veterans, military spouses, and professionals who share our passion for advancing technology and strengthening the missions we serve. Serve as a technical member of a Cyber Action Team and develop Authority to Operate and Authority to Connect (ATO/ATC) packages. Working under the direction of a Cyber Action Team lead and conduct cybersecurity work by performing modifications and reviews of existing ATO documentation and proactively providing insights into the documentation packages. Write and/or modify technical artifacts to support a favorable ATO/ATC decision. Track and monitor POA&Ms to escalate risks as appropriate. Determine cybersecurity risks and threats present, document and monitor them, and escalate to leadership as appropriate. Provide input to cybersecurity artifacts and technical briefings given to clients. Ability to track project level deliverables such as schedules, artifacts, reports and metrics and provide them to leadership. Ability to provide technical and/or cybersecurity expertise to technical problems requiring a solution. Ability to work independently and solve technical issues under general direction. Ability to take meeting notes and facilitate the actions of mentored personnel.

Requirements

Project Management
Cybersecurity

Responsibilities

Serve as a technical member of a Cyber Action Team and develop Authority to Operate and Authority to Connect (ATO/ATC) packages.
Working under the direction of a Cyber Action Team lead and conduct cybersecurity work by performing modifications and reviews of existing ATO documentation and proactively providing insights into the documentation packages.
Write and/or modify technical artifacts to support a favorable ATO/ATC decision.
Track and monitor POA&Ms to escalate risks as appropriate.
Determine cybersecurity risks and threats present, document and monitor them, and escalate to leadership as appropriate.
Provide input to cybersecurity artifacts and technical briefings given to clients.
Ability to track project level deliverables such as schedules, artifacts, reports and metrics and provide them to leadership.
Ability to provide technical and/or cybersecurity expertise to technical problems requiring a solution.
Ability to work independently and solve technical issues under general direction.
Ability to take meeting notes and facilitate the actions of mentored personnel.