Financial Analyst

To support the NIH's Governance, Risk & Compliance efforts, the full-time hybrid A&A Analyst will map FISMA systems to Zero Trust controls, manage control inventories, and develop authorization package templates while working 1-2 days per week onsite in Bethesda, MD. Key responsibilities Map NIH's FISMA systems to the Zero Trust controls and maintain records in the NIH ZTA control library Score residual gaps based on FIPS 199 impact, data sensitivity, and internet exposure Develop authorization package templates and continuous-monitoring cadences for the three authorization tiers Required qualifications US Citizenship required 4+ years of RMF/A&A experience in a federal environment Working knowledge of NIST SP 800-37 Rev 2, 800-53 Rev 5, 800-53A, and FISMA Bachelor's degree Security+ or CAP/CGRC certification