GRC Analyst / FedRAMP Project Manager

Looking for an opportunity to make an impact?

Leidos Digital Solutions, Inc. (DSI) is seeking a GRC Analyst / FedRAMP Project Manager to fill a role as central point of coordination for maintaining and strengthening our FedRAMP Moderate Authorization to Operate (ATO) for our IQ product SaaS offering.

In this role, you will lead the program team in documenting, validating and monitoring security control implementations to ensure ongoing FISMA and FedRAMP compliance. This role will also be responsible for leading the ongoing changes based on FedRAMP baseline improvement releases (BIR) like 20x.

We serve high profile customers across the federal government, on Capitol Hill, and within state, local, and tribal and territorial governments.  DSI delivers industry-leading CRM and workflow solutions designed specifically for government users.  If you have an interest in joining a dynamic and respected team and working with high profile clients, this is for you.  You will work in a fast-paced and diverse environment, enjoy flexible work arrangements, and will have a management team that encourages your career development and growth.  The program team is primarily remote.

Primary Duties & Responsibilities:

• Ensuring government and industry standards are met by managing risk, overseeing compliance, and developing security policies.
• Lead readiness for evolving FedRAMP standards, including FedRAMP 20x. Manage transition to 20x by tracking program changes, identifying compliance gaps, and coordinating documentation and process updates with engineering, development and other stakeholders.
• Manage continuous monitoring (ConMon), POA&Ms, annual assessments, evidence quality, and overall ATO health.
• Translate regulatory and framework requirements into clear, implementable expectations.
• Contribute to the development, review, and maintenance of information security policies, standards, and procedures.
• Maintain awareness of emerging threats, regulatory changes, and industry best practices.
• Partner with engineering, development, and business teams to support effective and practical security control implementation.
• Primary driver for the continued success of an established FedRAMP program with multiple agency customers
• Act as main point of contact and liaison with agencies, PMO, 3PAO, and Infrastructure provider.
• Manage the comprehensive project plan, schedule, and budget for ongoing FedRAMP compliance.
• Prepare, schedule, and lead annual assessment with 3PAO.
• Update, review, and submit documentation and artifacts required by the security package – SSP, POA&M, and SAR
• Guide the organization in adhering to the required FedRAMP security controls
• Manage relationship with FedRAMP infrastructure provider to include tickets, regular meetings, vulnerability scanning, reporting, billing, etc.
• Provide awareness to internal stakeholders relating to CIRTs and changes in the FedRAMP program
• Provide support to Sales and Marketing activities such as reviewing RFPs and providing response content on Proposals for Security and Control related questions 

Required Qualifications:

• Bachelor's degree with 2-4+ years of relevant experience in cybersecurity, risk management, governance, or a related field.  Experience may be substituted for education.
• Technical understanding of security architecture and practical knowledge of leading software security products
• Exceptional research skills with a strong understanding of cloud architecture, automation, and the ability to identify, interpret, and apply requirements, standards and guidance
• Experience with project management,
• Experience with software configuration management processes, procedures and products.
• A solid understanding of industry best practices and a commitment to operational excellence.
• Familiarity with cybersecurity and risk management frameworks including, but not limited to, FedRAMP, FISMA, NIST 800-53, NIST 800-171, NIST RMF.
• Excellent verbal and written communication skills with a corresponding command of Microsoft Office suite products (Word, Excel, Visio, PowerPoint).
• The ability to quickly establish solid working relationships with coworkers and customers to effectively integrate into a complex technical program with many moving parts.
• The ability to multi-task and complete projects/tasks with minimal supervision in an environment that is fast-paced, complex and changing.
• Attention to detail with the persistence to track tasks/projects for long-term success.
• Analytical skill to manipulate and interpret data for actionable insights.
• Ability to obtain a Top Secret Clearance.

Other Desired Skills:

• Familiarity with the Leidos DSI FedRAMP process.
• Familiarity with CRM software solutions.
• Familiarity with cloud-based software deployment models and architectures.
• Understanding of PII/PHI/CUI data protection requirements.
• Experience working with or for government customers.
• Experience supporting or validating controls on FedRAMP Moderate systems
• Experience briefing customers on Monthly FedRAMP reporting.

Are you ready to make an impact? Begin your journey of a flourishing and meaningful career; share your resume with us today!

We take care of our employees. Leidos seeks the best and the brightest, and in return, we invest in you, with an eye on your future, through career advancement, growth opportunities and continuous improvement via mentoring, formal and informal project management training and assistance with obtaining pertinent certifications. We challenge you to help solve some of the world’s toughest problems, and reward you with a welcoming culture that recognizes the importance of a strong work/life balance, as well as competitive compensation and benefits. We believe that diversity and inclusion make us all better and offer the chance to have fun and make a difference

If you're looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo — because the mission demands it. We're not hiring followers. We're recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We're already at step 30 — and moving faster than anyone else dares.

The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.