Cybersecurity Program Analyst
Spry Methods · Washington, District of Columbia, United States · $75K–$85K/yr
Information Technology & Services · 51-200 employees
About the role
The role involves managing project schedules, performance metrics, and documentation for cybersecurity authorization projects. It also requires coordinating RMF, A&A, and ATO activities between security teams and government stakeholders.
What they look for
Requirements
Candidates must have a bachelor's degree, CompTIA Security+ certification, and 3 years of experience in project management or cybersecurity compliance. Public Trust clearance eligibility and knowledge of RMF processes are required.
Full description
About Us:
Spry Methods is a proven provider of mission-focused technology, cybersecurity, and program management solutions supporting critical Federal and DoD missions. We specialize in delivering integrated, high-impact solutions across cyber operations, enterprise resource management, and mission support services. Our culture emphasizes collaboration, accountability, and innovation - empowering our teams to deliver meaningful outcomes in complex, high-security environments.
Who We’re Looking For (Position Overview)
The Project Analyst provides project management, program coordination, and cybersecurity authorization support to ensure the successful execution of organizational initiatives and Assessment & Authorization (A&A)/Authority to Operate (ATO) requirements. This position is responsible for maintaining project schedules, tracking program performance, coordinating stakeholder activities, managing documentation, supporting security assessment efforts, and facilitating communication across project teams. The ideal candidate possesses strong organizational, analytical, and communication skills and can effectively manage multiple priorities in a fast-paced environment.
\n
What Your Day-To-Day Looks Like (Position Responsibilities):
- Maintain and manage integrated project plans, schedules, milestones, dependencies, deliverables, risks, issues, action items, and performance metrics across multiple cybersecurity assessment and authorization projects.
- Coordinate and support RMF, A&A, and ATO activities by working with ISSOs, system owners, security teams, government stakeholders, and assessors to track assessments, findings, remediation efforts, and authorization package progress.
- Prepare, maintain, and review cybersecurity documentation, including Security Assessment Reports (SARs), Risk Assessment Reports (RARs), Security Authorization Packages (SAPs), ATO letters, waiver memoranda, SOPs, templates, briefing materials, and other program deliverables.
- Develop executive-level reports, dashboards, status updates, and presentations that communicate project health, schedule performance, risks, issues, milestones, and authorization activities.
- Facilitate meetings, develop agendas and briefing packages, document decisions and action items, and coordinate follow-up activities with program, security, and customer stakeholders.
- Ensure project and security documentation complies with organizational, regulatory, and cybersecurity requirements and is maintained accurately throughout the project lifecycle.
- Analyze program performance, provide recommendations to leadership, track key performance indicators, and support strategic planning and decision-making.
- Identify and implement process improvements, documentation standards, and best practices to enhance program execution and cybersecurity authorization activities.
- Draft and maintain official correspondence and customer-facing communications supporting authorization, compliance, and program management efforts.
- Provide ad hoc project, program, cybersecurity, and administrative support to meet evolving mission, customer, and contract requirements.
What You Need to Succeed (Minimum Requirements):
- Public Trust clearance eligibility required.
- Bachelor's degree in Business Administration, Project Management, Cybersecurity, Information Systems, or a related discipline. Equivalent combination of education and experience may be substituted.
- CompTIA Security+ certification
- 3 years of experience supporting project management, program management, cybersecurity compliance, or federal IT initiatives.
- Working knowledge of Assessment & Authorization (A&A), Authority to Operate (ATO), and Risk Management Framework (RMF) processes.
- Experience developing and maintaining project schedules, reports, briefings, and technical documentation.
- Strong organizational, analytical, problem-solving, and communication skills.
- Demonstrated ability to manage multiple assignments, priorities, and deadlines simultaneously.
- Proficiency with Microsoft Office Suite, including Word, Excel, PowerPoint, Outlook, Teams, and SharePoint.
- Experience supporting customer-facing deliverables.
- Must be able to travel to customer site up to two days a week.
Ideally, You Also Have (Preferred Qualifications):
- Experience supporting federal government cybersecurity programs.
- Familiarity with NIST RMF, FISMA, FedRAMP, and related cybersecurity compliance frameworks.
- Certified Associate in Project Management (CAPM)
\n$75,000 - $85,000 a year
Compensation is determined based on relevant experience, technical qualifications, certifications, clearance level, and contract requirements.
\n
