Cyber Risk & Assessment Analyst (NIST / RMF. - Federal / Cleared)

**Company Overview** Prometheus-LLC is a minority disadvantaged and veteran-owned small business (VOSB) consulting firm dedicated to delivering innovative solutions that address our clients' most critical cybersecurity challenges. We specialize in exploring, piloting, and implementing emerging technologies to give our clients a strategic advantage in their security posture. **Job Summary:** We are hiring a Cyber Risk & Assessment Analyst to support Security Assessment & Authorization (SA&A) lifecycles, NIST RMF compliance, and risk management across 35 federal system ATO packages. **Key Responsibilities:** * Conduct cybersecurity control assessments, ongoing authorization activities, and compliance reviews aligned with NIST SP 800-53 / RMF. * Prepare and update system security documentation, authorization packages, and quarterly Risk Registers. * Manage Plan of Action & Milestones (POA&Ms) and track risk mitigation strategies. * Support internal and external IT audit readiness (GAO, FISMA). * Evaluate security control effectiveness and provide risk recommendations to agency leadership. **Basic Qualifications:** * **U.S. Citizenship is strictly required**. * **Active Security Clearance** * **Experience:** Minimum 5 years conducting cybersecurity assessments, compliance evaluations, or risk management. * **Required Certification:** CompTIA Security+. * Strong knowledge of NIST SP 800-37, 800-53, 800-171, FISMA, and FedRAMP frameworks. **Preferred Qualifications & Experience:** * **Certifications:** Certified Information Systems Auditor (CISA) or Certified in Risk and Information Systems Control (CRISC). * Experience managing continuous authorization schedules for multi-system federal environments on staggered ATO cycles. * Familiarity with SharePoint-based GRC repositories or automated GRC toolsets. * Experience preparing systems for GAO Green Book and FISCAM audit inspections. * Proven ability and willingness to step into cross-functional IT/cybersecurity roles as operational needs arise. Because this is a lean, highly collaborative team supporting a small federal agency, candidates are expected to participate in cross-training, share operational coverage, and flex beyond strict job boundaries to maintain continuous mission support. Join us to leverage your cybersecurity expertise in a dynamic environment where your efforts directly contribute to safeguarding critical federal systems! Pay: $92,300.00 - $112,000.00 per year Experience: * cybersecurity assessment or RMF: 5 years (Required) License/Certification: * CompTIA Security+ (Required) Security clearance: * Secret (Required) Work Location: Hybrid remote in Washington, DC 20004