Risk and Compliance Analyst

Position Summary

The Risk and Compliance Analyst supports mission-critical objectives under the referenced work order by conducting requirements analysis, capability-based assessments, and documentation to support DoD governance frameworks and security policies. This role ensures adherence to DoD governance frameworks and develops mitigation strategies.

This future opportunity is contingent upon award.

Job Description

• The Risk and Compliance Analyst is responsible for conducting risk assessments and implementing mitigation strategies.
• The position requires ensuring adherence to federal security and compliance mandates.
• Analysts will support DoD cybersecurity policies, security control implementation, and program governance audits.
• The role includes developing requirements documentation and conducting gap analyses.

Required Qualifications and Experience

The contractor shall provide personnel who meet one of the following requirements:

• Bachelor's degree in Risk Management, Information Security, Engineering, Information Systems, or a related field; or
• A minimum of five (5) years of professional experience in risk and compliance analysis.

Candidates must have demonstrated experience in the following areas

• Conducting risk assessments and implementing mitigation strategies.
• Ensuring adherence to federal security and compliance mandates.
• Experience with DoD cybersecurity policies and security control implementation.
• Program governance audits.
• Developing requirements documentation and conducting gap analyses.

Required Skills and Competencies

• Expertise in risk assessment methodologies and compliance audits.
• Working knowledge of DoD RMF, NIST 800-53, and FedRAMP.
• Proficiency in requirements traceability matrices and capability development documentation.
• Strong analytical and documentation skills.
• Ability to align program objectives with DoD acquisition frameworks.

Education

• Bachelor's degree in a relevant field, or an equivalent combination of education and experience.
• Lean Six (Preferred, Not Required)
• PMP (Preferred, Not Required)
• CRISC (Preferred, Not Required)
• CISM (Preferred, Not Required)
• CISSP (Preferred, Not Required)

Clearance Requirement

• The ability to obtain and maintain the required clearance as specified by the program.