Cybersecurity Risk Analyst

Job Summary

Providing advanced Governance, Risk, and Compliance (GRC) support, the full-time Cybersecurity Risk Management Analyst will manage Assessment & Authorization (A&A) activities, conduct cybersecurity risk assessments, and ensure compliance with federal cybersecurity requirements while working remotely.

Key responsibilities

• Manage the full lifecycle of Risk Management Framework (RMF) activities and develop security authorization documentation
• Conduct cybersecurity risk assessments and provide risk analysis to Authorizing Officials and senior leadership
• Support FISMA reporting activities and prepare documentation for internal and external audits

Required qualifications

• Bachelor's degree in Cybersecurity, Information Technology, Public Policy, or related discipline (or equivalent experience)
• Professional cybersecurity certification such as CISSP, CISM, or CAP
• Minimum seven (7) years of progressive cybersecurity experience, with at least four (4) years supporting federal RMF and A&A programs
• Strong working knowledge of NIST SP 800-53 Revision 5 and FISMA
• Active Public Trust clearance or the ability to obtain and maintain one