Risk and Compliance Analyst

Job Summary

To support a growing cybersecurity initiative, the full-time remote Risk and Compliance Analyst will perform comprehensive risk assessments, develop risk management processes, and ensure compliance with federal cybersecurity requirements while collaborating with various stakeholders.

Key responsibilities

• Perform and support comprehensive cybersecurity risk assessments for information systems and enterprise initiatives
• Develop and implement risk-management processes, including risk identification, assessment, and mitigation
• Conduct compliance assessments against applicable federal cybersecurity requirements and organizational standards

Required qualifications

• Minimum of 7 years of Information Security experience, with at least 5 years in risk and compliance at a large organization or government agency
• Expertise in risk management, compliance, audit, or related roles
• Experience conducting internal and external audits to assess compliance with regulatory requirements
• Proven ability to develop and implement risk management programs and continuous monitoring strategies
• Expertise in policy development, documentation, and enforcement