Cyber Risk & Assessment Analyst
About The Position
The Cyber Risk & Assessment Analyst assesses DNFSB cybersecurity risk and compliance, prepares authorization documentation, and maintains audit-ready ATO evidence. This position is contingent upon contract award. The role performs cybersecurity assessments and compliance activities, prepares and maintains authorization packages, reviews technical evidence, manages risk and remediation records, and supports ongoing authorization, FISMA reporting, internal control testing, and audit requests. It also contributes to policy and procedure updates, communicates risk findings to agency stakeholders, and provides qualified backup across cybersecurity functions.
Requirements
- Bachelor’s degree.
- At least 6 years of relevant cybersecurity experience, including at least 5 years conducting cybersecurity assessments, compliance evaluations, or risk management.
- U.S. citizenship.
- Favorable Tier 2 Public Trust adjudication required before performance.
- Security+ certification required.
- Knowledge of NIST RMF, SP 800-53/800-171, federal FISMA/FedRAMP/Zero Trust, risk reporting, and mitigation.
Nice To Haves
- CISA or CRISC certification preferred.
- ISC2 CGRC certification preferred.
- Experience with ATO packages and auditable evidence preferred.
Responsibilities
- Perform cybersecurity assessments, compliance evaluations, and internal control reviews aligned with NIST frameworks and DNFSB policy.
- Prepare and maintain authorization packages for assessment, including system security documentation, risk assessments, control narratives, and supporting evidence.
- Review technical evidence from infrastructure and security tools, document control effectiveness and identified risks, and develop mitigation recommendations.
- Maintain the quarterly Call #1 risk register and coordinate inputs to the Project Manager's separate weekly and ad hoc risk and issue log.
- Develop and update Plans of Action and Milestones (POA&Ms), track remediation owners and dates, and support monthly status reporting.
- Support ongoing authorization, FISMA reporting, internal control testing, and responses to assessment and audit documentation requests.
- Track evidence currency and authorization status against PWS standards for 100% ATO sustainment and at least 95% evidence freshness.
- Contribute to updates of existing policies and procedures, explain risk findings to agency stakeholders, and provide qualified backup across cybersecurity functions.
Benefits
- Medical, dental, vision, life, and disability coverage for eligible full-time employees.
- Retirement savings with company match.
- Paid time off.
- Voluntary supplemental benefits.
- Access to an employee assistance program.
- Educational assistance with tuition reimbursement.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Mid Level
