Risk and Compliance Analyst

This is a fully remote position, open to applicants in United States.

📋 Description

• Provide support to a prominent Federal Government client.

• Utilize cybersecurity risk management, compliance, audit, and continuous monitoring expertise to evaluate organizational risk and ensure alignment with Federal security standards and policies.

• Work collaboratively with technical teams, program leadership, Government stakeholders, and auditors.

• Execute cybersecurity risk assessments and compliance reviews to detect gaps and identify necessary remediation actions.

• Assist in internal and external audits in accordance with relevant Federal requirements and organizational policies.

• Conduct risk assessment, mitigation, tracking, and continuous monitoring activities.

• Create and maintain cybersecurity policies, procedures, and compliance documentation.

• Monitor and report compliance issues while coordinating corrective measures with technical teams.

• Aid in VA audit planning, documentation collection, auditor inquiries, and required submissions.

• Analyze findings and produce prioritized recommendations for remediation.

• Travel as necessary for meetings, training, presentations, or briefings with project stakeholders.

⛳️ Requirements

• Capability to obtain and sustain the necessary VA background investigation/suitability determination and system access.

• Certification in one or more of IAT III, IAM III, or IASAE III certifications.

• Bachelor's degree in Business Administration, Business Management, Cybersecurity, Computer Science, Information Systems, Information Assurance, Information Security, Information Resource Management, or related fields.

• A minimum of 7 years of experience in Information Security.

• At least 5 years of risk and compliance experience in a large organization or Government agency comparable in size/scope to GSA, IRS, DoD, or VA.

• Proven expertise in managing and reporting compliance issues, along with coordination with regulatory bodies.

• Experience in conducting cybersecurity risk assessments, compliance reviews, and audits.

• Background in developing risk mitigation strategies and supporting continuous monitoring efforts.

• IAT III/IAM III/IASAE III certifications may replace a relevant Bachelor's degree or 4 years of pertinent experience.

• An advanced degree may substitute for up to 2 years of the required experience.

• Preferred experience in VA/Federal cybersecurity compliance.

• Familiarity with RMF, FISMA, NIST, or ATO is preferred.

• Experience in audit remediation or POA&M is preferred.

🏝️ Benefits

• Eleven Federal Holidays.

• Paid Time Off accrued each pay period.

• Parental Leave.

• Three medical plan options with substantial employer contributions.

• Dental and Vision Insurance.

• Company-paid Short-Term and Long-Term Disability.

• Company-paid Life and AD&D Insurance.

• 401k with competitive matching and a vesting schedule.

• Assistance for continuing education.

• Medical, Dependent Care, and Commuter Flexible Spending Accounts.

• Employee Assistance Program.

• Wellness benefits including the Calm Health app and WellHub gym subsidy (formerly GymPass).

• 529 College Savings Plan.

• Legal Insurance.

• Pet Insurance.