Cyber Risk & Assessment Analyst (NIST/FISMA)

Dine Development Corporation; Washington (District of Columbia); On-site; USD 148,000 - 168,000; Full time

Job summary

Din Development Corporation is seeking a Cyber Risk & Assessment Analyst in Washington, DC for a full-time role. The position focuses on assessing cybersecurity risk, preparing authorization documentation, and maintaining audit-ready evidence per DNFSB policy. This role is contingent upon contract award.

The candidate will perform assessments, develop POA&Ms, support FISMA reporting, and coordinate risk-related documentation across teams, ensuring 100% ATO sustainment and high evidence freshness.

Qualifications

• Knowledge of NIST RMF, SP 800-53/800-171, federal FISMA/FedRAMP/Zero Trust.
• Experience conducting cybersecurity assessments, compliance evaluations, or risk management.

Responsibilities

• Perform cybersecurity assessments and compliance evaluations aligned with NIST frameworks.
• Prepare and maintain authorization packages with system security documentation and risk assessments.
• Review evidence from infrastructure and security tools and document control effectiveness.
• Maintain the quarterly risk register and support weekly risk/issue logs.
• Develop and track POA&Ms and remediation status for monthly reporting.
• Support ongoing authorization, FISMA reporting, and audit requests.
• Explain risk findings to stakeholders and provide backup across cybersecurity functions.

Skills

NIST RMF knowledge

Risk assessment

Audit documentation

Education

Bachelor's degree

Security+ certification

CISA

CRISC

CGRC (ISC)2

Job description

Din Development Corporation is seeking a Cyber Risk & Assessment Analyst in Washington, DC for a full-time role. The position focuses on assessing cybersecurity risk, preparing authorization documentation, and maintaining audit-ready evidence per DNFSB policy. This role is contingent upon contract award.

The candidate will perform assessments, develop POA&Ms, support FISMA reporting, and coordinate risk-related documentation across teams, ensuring 100% ATO sustainment and high evidence freshness.