Maintain and update FISMA documentation for the client’s IT system portfolio
Coordinate the Authority to Operate (ATO) process for applicable systems
Draft, review, and maintain Privacy Impact Assessments (PIAs) for client systems
Support data governance and privacy obligations
Serve as a working-level point of contact with the client's security, privacy, and compliance functions
Identify and escalate compliance gaps or changes in system posture
Prepare and maintain documentation packages for periodic reviews
Work directly with client program staff to document business requirements
Translate stakeholder descriptions into structured requirements
Develop and maintain process flow diagrams and functional specifications for application design
Help prioritize and scope requirements
Contribute to user acceptance testing and document outcomes
Bridge communication between technical developers and business stakeholders

Demonstrated experience with FISMA compliance documentation
Experience drafting or maintaining Privacy Impact Assessments for systems that process personally identifiable information
Familiarity with NIST frameworks like NIST SP 800-53 and NIST SP 800-37
Experience supporting or coordinating ATO processes
Experience with IT system inventory maintenance and data governance or records management obligations
Demonstrated experience in business requirements gathering and documentation
Ability to work directly with senior subject matter experts
Strong written communication skills

Business Analyst

Key skills