Enterprise Risk Analyst

Job Summary

Executing the VA Enterprise Risk Analysis process, the full-time remote Enterprise Risk Analyst will identify key cybersecurity risk factors in network-connected medical devices and Special Purpose Systems, leveraging system documentation and data to provide comprehensive risk assessments.

Key responsibilities

• Identify and evaluate cybersecurity risk factors using a custom ERA tool for network-connected medical devices
• Document critical security posture elements and perform annual reviews to ensure accurate and complete risk assessments
• Collaborate with Federal and contractor teams to facilitate effective enterprise risk analysis and reporting

Required qualifications

• Experience with cybersecurity, risk management, or risk assessment for complex systems
• Familiarity with NIST SP 800-53 and NIST SP 800-30 standards
• Ability to document and depict network topology and protocols
• Bachelor's degree in Computer Science, Mathematics, Engineering, or a related technical discipline with 10 years of relevant experience, or 18 years of relevant experience in lieu of a degree
• Capability to obtain and maintain a Public Trust or Suitability/Fitness determination based on client requirements