Cybersecurity Risk Management Analyst

Job Summary

Providing advanced Governance, Risk, and Compliance (GRC) support for federal information systems, the full-time Cybersecurity Risk Management Analyst will manage Assessment & Authorization (A&A) activities, conduct cybersecurity risk assessments, and ensure compliance with federal cybersecurity requirements while working remotely.

Key responsibilities

• Manage the full lifecycle of Risk Management Framework (RMF) activities and develop security authorization documentation
• Conduct cybersecurity risk assessments and provide risk analysis and recommendations to senior leadership
• Support FISMA reporting activities and prepare documentation for internal and external audits

Required qualifications

• Bachelor's degree in Cybersecurity, Information Technology, Public Policy, or related discipline (or equivalent experience)
• Professional cybersecurity certification such as CISSP, CISM, or CAP
• Minimum seven (7) years of progressive cybersecurity experience
• Minimum four (4) years supporting federal Risk Management Framework (RMF) and Assessment & Authorization (A&A) programs
• Strong working knowledge of NIST Special Publication 800-53 Revision 5 and the Federal Information Security Modernization Act (FISMA)