Risk and Compliance Analyst
Core
Perform comprehensive cybersecurity risk assessments, compliance audits, and risk management for federal government systems and applications.
Role type
Mid-level IC Risk and Compliance Analyst (Cybersecurity)
Builds
Secure, compliant technical solutions for federal customers
Domain
Federal Government / Cybersecurity / Risk Management
Deliverable
dashboards & analysis
Required skills
Risk assessment, compliance auditing, NIST framework knowledge, regulatory analysis, gap analysis, remediation planning, stakeholder communication
Preferred skills
FISMA/FICAM audit experience, RMF process knowledge, security architecture understanding
Technologies
NIST SP 800-53, NIST Cybersecurity Framework, FISMA, FICAM, RMF
Responsibilities
Perform cybersecurity risk assessments and compliance audits against NIST and Federal standards; Develop and implement risk-management processes and mitigation strategies; Coordinate with auditors and stakeholders during internal and external assessments; Document compliance gaps and develop remediation plans; Support Federal Assessment and Authorization (A&A) and Authority to Operate (ATO) processes; Prepare risk reports and briefings for leadership and technical teams.
Seniority
Mid-level, hands-on IC
