Job Description
Job Description
Position Overview
We are seeking a FISMA Program Support Analyst to join our team supporting a federal client in Washington, D.C. This full-time, onsite position is responsible for managing and executing FISMA compliance activities, ensuring systems are secure and aligned with federal cybersecurity requirements. The ideal candidate will have hands-on experience with NIST frameworks, federal IT documentation, risk assessments, and continuous monitoring in a government or contractor environment.
Key Responsibilities
- Manage and support the organization’s FISMA compliance program in alignment with NIST and federal security standards
- Prepare and maintain documentation such as System Security Plans (SSPs), Security Assessment Reports (SARs), and Plans of Action and Milestones (POA&Ms)
- Coordinate and support internal audits and federal security assessments
- Conduct risk assessments and support remediation of identified security vulnerabilities
- Oversee continuous monitoring activities and incident response coordination
- Collaborate with internal IT, security, and compliance teams, as well as government stakeholders
- Develop and update policies, procedures, and guidance related to information security and FISMA compliance
- Track and report on FISMA metrics, compliance status, and system risk posture to senior leadership
Requirements
- Bachelor’s degree in Computer Science, Cybersecurity, Information Systems, or a related field
- Minimum 6 years of experience in information security, IT governance, or risk management
- At least 2 years of hands-on experience supporting FISMA compliance or federal cybersecurity programs
- Strong knowledge of NIST standards (SP 800-53, 800-37, 800-171) and FISMA requirements
- Experience preparing and maintaining security documentation such as SSPs, POA&Ms, and SARs
- Familiarity with risk assessments, vulnerability management, and continuous monitoring activities
- Clear and professional communication skills, both written and verbal
- Must be authorized to work in the U.S. and have at least 4 consecutive years of U.S. residency
- Must hold or be eligible to obtain a Public Trust clearance
Preferred Qualifications
- Prior experience supporting cybersecurity or compliance efforts for federal agencies
- Industry certifications such as CISSP, CAP, CISM, Security+, or CySA+
- Familiarity with High Value Asset (HVA) security practices
- Experience using governance, risk, and compliance (GRC) tools or platforms
- Ability to lead or coordinate tasks across cross-functional security or compliance teams
Additional Information
- Employment Type: Full-Time (W2)
- Location: 100% onsite in Washington, D.C.
- Clearance: Public Trust (must hold or be eligible to obtain)
- Travel: Occasional, based on client requirements
Company DescriptionSara Software Systems, LLC founded in July 2004 is a small, woman, minority owned and economically disadvantaged 8(a) business as approved by the Small Business Administration (SBA). Owned and managed by experienced IT professionals, we bring a realistic and knowledgeable approach with 15 years of technical excellence to solve complex federal and commercial IT challenges, transform how organizations operate, and protect our Customer's critical infrastructure.
Sara Software Systems, LLC is a process-driven and quality-focused company and we are appraised at Maturity Level (ML) 3 by the CMMI Institute for both DEV + SVC. Our CMMI DEV ML3 appraisal was specifically focused on Agile and DevSecOps. We are International Standards of Organization (ISO) 9001:2015, ISO 20000-1:2011 and ISO 27001:2013-certified.
Sara Software Systems, LLC is a leading technology Services provider with focus in Application Development and Modernization, Agile Transformations, Program Management , Information Technology , Software development, Cybersecurity, IT infrastructure, Business Process Reengineering and Service Desk services for Federal Agencies and commercial organizations. We serve the business needs of our customers by providing strategy, program management, architecture, and sustainment of information technology solutions both in traditional waterfall and agile methodologies that transform ideas to value.
Company Description
Sara Software Systems, LLC founded in July 2004 is a small, woman, minority owned and economically disadvantaged 8(a) business as approved by the Small Business Administration (SBA). Owned and managed by experienced IT professionals, we bring a realistic and knowledgeable approach with 15 years of technical excellence to solve complex federal and commercial IT challenges, transform how organizations operate, and protect our Customer's critical infrastructure.\r\nSara Software Systems, LLC is a process-driven and quality-focused company and we are appraised at Maturity Level (ML) 3 by the CMMI Institute for both DEV + SVC. Our CMMI DEV ML3 appraisal was specifically focused on Agile and DevSecOps. We are International Standards of Organization (ISO) 9001:2015, ISO 20000-1:2011 and ISO 27001:2013-certified.\r\n\r\nSara Software Systems, LLC is a leading technology Services provider with focus in Application Development and Modernization, Agile Transformations, Program Management , Information Technology , Software development, Cybersecurity, IT infrastructure, Business Process Reengineering and Service Desk services for Federal Agencies and commercial organizations. We serve the business needs of our customers by providing strategy, program management, architecture, and sustainment of information technology solutions both in traditional waterfall and agile methodologies that transform ideas to value.