Knowledge of NIST SP 800-53 security controls for Contingency Planning and Incident Response.
Experience in developing, reviewing, and testing Information System Continuity Plans (ISCPs) and Incident Response Plans (IRPs).
Proven track record in conducting tabletop and functional exercises, as well as disaster recovery tests.
Familiarity with security authorization processes and compliance validation.
Strong analytical skills for assessing documentation and providing improvement recommendations.
Excellent technical writing and stakeholder coordination abilities.
Responsibilities
Support RMF continuous monitoring by ensuring compliance of continuity and incident response artifacts.
Act as Subject Matter Expert for system teams in developing and updating ISCPs and IRPs.
Verify completion and updates of ISCP, Business Impact Analysis (BIA), and IRP documentation before assessments.
Coordinate and conduct tabletop and functional exercises to validate contingency and incident response plans.
Produce Test Plans and Results (TP&R) and finalize documentation post-exercise.
Plan and execute incident response awareness and training activities.
Maintain weekly status reports on contingency plan tests and incident response training.
Develop After-Action Reports (AARs) and corrective action recommendations.
Benefits
Opportunity to work directly with system teams on critical continuity and incident response initiatives.
Engagement in hands-on exercises and training that enhance practical skills.
Access to a collaborative environment focused on compliance and readiness.
Involvement in the development of key documentation that impacts organizational security posture.
Full Job Description
About the role
The RMF Continuity Planning and Incident Response Analyst provides specialized support for continuity planning, disaster recovery, incident response preparedness, and RMF assessment readiness activities. The position works directly with system teams to develop, maintain, test, and validate contingency and incident response documentation, ensuring compliance with Federal and agency, RMF requirements. The role is responsible for coordinating continuity and incident response planning activities, facilitating exercises and training, and ensuring all required artifacts are completed and assessment-ready within established timelines.
What you'll do
Support RMF continuous monitoring efforts by ensuring continuity and incident response artifacts are complete, compliant, and readily available for review.
Provide Subject Matter Expert support to system teams for the development and periodic updates of Information System Continuity Plans (ISCPs) and Incident Response Plans (IRPs).
Verify ISCP, Business Impact Analysis (BIA), and IRP documentation are completed, updated, and finalized prior to scheduled annual system security assessment.
Coordinate and conduct tabletop exercises and functional exercises to validate documented contingency planning and incident response capabilities.
Produce Test Plans and Results (TP&R), IRP tabletop exercise documentation and finalized Plans upon exercise completion.
Support the planning, coordination, and execution of incident response awareness and training activities.
Maintain and provide weekly status reports of contingency plan tests, exercises, and incident response training activities.
Develop draft and final After-Action Reports (AARs), lessons learned documentation, and corrective action recommendations.
Qualifications
Knowledge of NIST SP 800-53 security controls related to Contingency Planning (CP) and Incident Response (IR).
Experience developing, reviewing, and testing ISCPs, Incident Response Plans (IRPs), and Business Impact Analyses.
Experience conducting tabletop exercises, functional exercises, disaster recovery tests, and incident response training activities.
Familiarity with security authorization processes, assessment preparation, and compliance validation requirements.
Ability to analyze continuity and incident response documentation and provide actionable recommendations for improvement.
Strong technical writing, documentation, facilitation, and stakeholder coordination skills.
