Skip to main content
David Careers

Continuous Monitoring (ISCM) Analyst

Posted 15 days ago

big impact tech bitBethesda (MD)
Information Security AnalystsComputer Systems Design Services

SENIORITY

Senior

Apply (opens in a new tab)

About the role

About Big Impact Tech Big Impact Tech (BIT) is a Small Business providing IT and business management consulting to federal and commercial clients. We deliver mission-focused solutions in data, cloud, cybersecurity, and program management.
Position Overview: The Continuous Monitoring (ISCM) Analyst runs the monthly control review, SAR, and RAM cycle for the 15 systems in the Ongoing Authorization (OA) program. This position also makes FIPS 199 and Security Impact Analysis determinations and maintains the TRAL. The minimum 4 years of experience reflects the need for consistent, on-time delivery of recurring monthly deliverables.
Responsibilities:
  • Performs monthly control reviews and produces monthly SARs.
  • Prepares Risk Assessment Memos (RAMs).
  • Makes FIPS 199 and Security Impact Analysis determinations.
  • Maintains the TRAL for the 15 OA systems.
  • Keeps the monthly control review, SAR, and RAM cycle on schedule.
  • Other duties as assigned.
Required Qualifications:
  • BA/BS degree in Cybersecurity, Information Technology, or a related discipline.
  • Minimum Experience Required:
  • Minimum 4 years of experience in continuous monitoring, security assessment, or RMF.
  • Demonstrated knowledge of NIST SP 800-137 (ISCM) and NIST SP 800-53.
  • Demonstrated experience with GRC tools such as CSAM or JCAM. Additional Experience: Security+, CySA+, or CGRC certification.

Before you apply

Applying takes about a minute. These four things decide how fast it moves after that.

Your profile is current

It's what we read first. Occupations, seniority and locations matter more than a long history.

Two examples you can talk through

Not a portfolio — just two pieces of work where you can explain the decisions and what you'd change.

A number in mind

What you're on now and what would make you move. We negotiate better when we know both.

Your notice period

Employers plan around it, and it's the question that stalls offers most often.

Once you apply, someone reads it and calls you before anything reaches the employer — usually within two working days.

More like this