Security Compliance & Documentation Analyst at Aretum

• Job Location McLean, VA
• Seniority Mid-Senior Level
• Type Full-time

Share on:

Description

Active Top Secret Required About Aretum Aretum is a mission-driven organization committed to delivering innovative, technology-enabled solutions to our customers across defense, civilian, and homeland security sectors.

Our teams work at the intersection of strategy, technology, and transformation, helping agencies solve their most critical challenges.

We believe in investing in our people and creating a culture where collaboration, inclusion, and professional growth are at the forefront.

Job Summary The Mid-Level Security Compliance & Documentation Analyst serves as an ISSO-aligned cybersecurity professional responsible for leading RMF, authorization, and compliance activities for complex, classified C5ISR and IIR mission systems.

This role owns RMF package integrity, documentation quality, and authorization readiness while serving as a senior advisor to government stakeholders.

Technical exposure may include select security tools or monitoring capabilities depending on the individual's background, but the primary focus is governance, compliance, and documentation leadership.

Due to the nature of our work as a federal consulting organization, employees may be expected to handle Controlled Unclassified Information (CUI) and must adhere to applicable safeguarding and compliance requirements.

Responsibilities RMF Leadership & Authorization Support and maintain development, maintenance, and oversight of RMF packages for classified C5ISR and IIR systems Coordinate with Government System Owners, ISSOs, ISSEs, and Authorizing Officials to collect evidence, validate control implementation and maintain package accuracy Execute RMF support activities for ATO/IATT and continuous monitoring across multiple systems/enclaves, including documentation updates driven by engineering and operational changes Document and track POA&M items, support risk-based prioritization, and provide remediation status reporting through closure.