[Remote] Cyber Security Associate (Remote)

Note: The job is a remote job and is open to candidates in USA. GovCIO is currently hiring for a Cyber Security Analyst 1 to support foundational cybersecurity and ATO activities. This role involves assisting with documentation, evidence collection, and Continuous Monitoring tasks across VA systems, and it is fully remote within the United States. Responsibilities Assist in preparing and updating foundational ATO documentation under senior staff guidance (e.g., SSP sections, IRP updates, PTA/PIA drafts, CMP updates) Support tracking and maintenance of ATO packages in ServiceNow CAM, including uploading artifacts and organizing evidence Support Continuous Monitoring tasks using ServiceNow CAM, updating dashboards with supervision Help coordinate routine security vulnerability scanning requests and compile scan outputs for review Participate as a note‑taker or supporting analyst during tabletop and functional IRP/ISCP/DRP exercises Assist with gathering data for POA&M updates and maintain documentation libraries Conduct initial reviews of security findings and escalate issues to senior analysts Help with administrative tasks related to audit preparation, evidence gathering, and compliance reporting Collaborate with cross‑functional teams by collecting information needed for engineering, privacy, or security reviews Learn and apply fundamental cybersecurity frameworks, VA security processes, and best practices Skills Bachelor's degree in Computer Science, Cyber Security, Information Systems, or similar; OR equivalent experience or certifications 0–2 years of cybersecurity experience (internship, entry-level role, or coursework projects acceptable) Familiarity with RMF, NIST SP 800-53 security controls, creating and updating artifacts and FISMA security documents, control implementation details, and Plan of Action and Milestones (POA&M) Basic understanding of vulnerability scanning tools, ATO processes, or GRC workflows Foundational understanding of security concepts such as risk, compliance, configuration management, and incident response Willingness to learn VA GRC tools such as eMASS and ServiceNow CAM Strong attention to detail and documentation skills Effective verbal and written communication skills Candidates must be U.S. citizens or permanent residents and have resided in the United States for a minimum of three (3) years Experience with Jira, Confluence, and Microsoft 365 Exposure to federal cybersecurity programs a plus Entry-level certifications: Security+, CAP (in progress), or similar Interest in AI‑assisted GRC tooling and automation FISMA, FedRAMP (conceptual understanding) NIST SP 800‑53 (awareness level) NIST SP 800‑37 RMF basics VA Directive 6500 (introduction to concepts) Benefits Employee Assistance Program (EAP) Corporate Discounts Learning & Development platform, to include certification preparation content Training, Education and Certification Assistance* Referral Bonus Program Internal Mobility Program Pet Insurance Flexible Work Environment Company Overview GovCIO is a business consulting firm that focuses on cyber security, digital, data, management and mission services, and IT services. It was founded in 2010, and is headquartered in Fairfax, Virginia, USA, with a workforce of 1001-5000 employees. Its website is