GRC Analyst – FedRAMP Project Manager

Leidos

GRC Analyst / FedRAMP Project Manager ensuring compliance for government agency clients. Leading security control implementations and managing FedRAMP transitions.

Posted 7/3/2026full-timeRemote • 🇺🇸 United StatesJuniorMid-Level💰 $69,550 - $125,725 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in managing FedRAMP compliance, including risk management, security policy development, and project management. Proficient in translating regulatory requirements into actionable security controls while maintaining strong communication with stakeholders.

Highest-signal resume keywords

FedRAMP Compliance ManagementRisk ManagementCybersecurity FrameworksProject ManagementSecurity Policy Development

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

CybersecurityRisk ManagementSecurity ArchitectureSoftware Security ProductsCloud ArchitectureAutomationSoftware Configuration ManagementNIST 800-53NIST 800-171NIST RMF

Soft Skills

Exceptional Research SkillsExcellent Verbal CommunicationExcellent Written Communication

Tools & Technologies

Microsoft Office SuiteVisioPowerPointExcelWord

Industry Keywords

FedRAMPFISMAComplianceContinuous MonitoringATO HealthCIRTs3PAOSecurity ControlsOperational ExcellenceDocumentation

Tech Stack

Tools & technologies

CloudCyber Security

About the role

Key responsibilities & impact

Ensuring government and industry standards are met by managing risk, overseeing compliance, and developing security policies.
Lead readiness for evolving FedRAMP standards, including FedRAMP 20x.
Manage transition to 20x by tracking program changes, identifying compliance gaps, and coordinating documentation and process updates with engineering, development and other stakeholders.
Manage continuous monitoring (ConMon), POA&Ms, annual assessments, evidence quality, and overall ATO health.
Translate regulatory and framework requirements into clear, implementable expectations.
Contribute to the development, review, and maintenance of information security policies, standards, and procedures.
Maintain awareness of emerging threats, regulatory changes, and industry best practices.
Partner with engineering, development, and business teams to support effective and practical security control implementation.
Primary driver for the continued success of an established FedRAMP program with multiple agency customers.
Act as main point of contact and liaison with agencies, PMO, 3PAO, and Infrastructure provider.
Manage the comprehensive project plan, schedule, and budget for ongoing FedRAMP compliance.
Prepare, schedule, and lead annual assessment with 3PAO.
Update, review, and submit documentation and artifacts required by the security package – SSP, POA&M, and SAR.
Guide the organization in adhering to the required FedRAMP security controls.
Manage relationship with FedRAMP infrastructure provider to include tickets, regular meetings, vulnerability scanning, reporting, billing, etc.
Provide awareness to internal stakeholders relating to CIRTs and changes in the FedRAMP program.
Provide support to Sales and Marketing activities such as reviewing RFPs and providing response content on Proposals for Security and Control related questions.

Requirements

What you’ll need

Bachelor's degree with 2-4+ years of relevant experience in cybersecurity, risk management, governance, or a related field.
Experience may be substituted for education.
Technical understanding of security architecture and practical knowledge of leading software security products.
Exceptional research skills with a strong understanding of cloud architecture, automation, and the ability to identify, interpret, and apply requirements, standards and guidance.
Experience with project management.
Experience with software configuration management processes, procedures and products.
A solid understanding of industry best practices and a commitment to operational excellence.
Familiarity with cybersecurity and risk management frameworks including, but not limited to, FedRAMP, FISMA, NIST 800-53, NIST 800-171, NIST RMF.
Excellent verbal and written communication skills with a corresponding command of Microsoft Office suite products (Word, Excel, Visio, PowerPoint).

Benefits

Comp & perks

Competitive compensation
Health and Wellness programs
Income Protection
Paid Leave
Retirement