Cyber Risk & Assessment Analyst with Security Clearance

Diné Development Corporation; Washington (District of Columbia); On-site; USD 148,000 - 168,000; Full time

Benefits offered by this job

Medical coverage

Dental coverage

Retirement plan and matching

Job summary

Diné Development Corporation seeks an experienced cybersecurity professional to perform assessments, maintain authorization packages, and track risk through control evidence and POA&Ms. The role supports FISMA reporting and ongoing authorization efforts for government contracts.

Candidate will review evidence, coordinate with stakeholders, and ensure 100% ATO sustainment with high evidence freshness while contributing to policy updates and risk mitigation strategies.

Qualifications

• Bachelor's degree required with at least 6 years of cybersecurity experience.
• Experience conducting cybersecurity assessments, compliance evaluations, or risk management.
• U.S. citizen with favorable Tier 2 Public Trust adjudication.
• Security+ required; CISA/CRISC preferred; CGRC also preferred.

Responsibilities

• Perform cybersecurity assessments, compliance evaluations, and internal control reviews aligned with NIST frameworks and DNFSB policy.
• Prepare and maintain authorization packages for assessment, including system security documentation, risk assessments, control narratives, and supporting evidence.
• Review technical evidence from infrastructure and security tools, document control effectiveness and identified risks, and develop mitigation recommendations.
• Maintain the quarterly Call #1 risk register and coordinate inputs to the Project Manager's risk and issue log.
• Develop and update POA&Ms, track remediation owners and dates, and support monthly status reporting.
• Support ongoing authorization, FISMA reporting, internal control testing, and responses to assessment and audit documentation requests.
• Track evidence currency and authorization status against PWS standards for 100% ATO sustainment and 95% evidence freshness.
• Contribute to updates of existing policies and procedures, explain risk findings to agency stakeholders, and provide backup across cybersecurity functions.

Skills

NIST RMF

FISMA

Risk management

Auditing evidence

Stakeholder communication

Education

Bachelor's degree in cybersecurity

Tools

Security+ Certification

CISA

CRISC

Job description

Responsibilities

• Perform cybersecurity assessments, compliance evaluations, and internal control reviews aligned with NIST frameworks and DNFSB policy.
• Prepare and maintain authorization packages for assessment, including system security documentation, risk assessments, control narratives, and supporting evidence.
• Review technical evidence from infrastructure and security tools, document control effectiveness and identified risks, and develop mitigation recommendations.
• Maintain the quarterly Call #1 risk register and coordinate inputs to the Project Manager's separate weekly and ad hoc risk and issue log.
• Develop and update Plans of Action and Milestones (POA&Ms), track remediation owners and dates, and support monthly status reporting.
• Support ongoing authorization, FISMA reporting, internal control testing, and responses to assessment and audit documentation requests.
• Track evidence currency and authorization status against the PWS standards for 100% ATO sustainment and at least 95% evidence freshness.
• Contribute to updates of existing policies and procedures, explain risk findings to agency stakeholders, and provide qualified backup across cybersecurity functions.

Qualifications

• Education and Experience: Bachelor's degree and at least 6 years of relevant cybersecurity experience, including at least 5 years conducting cybersecurity assessments, compliance evaluations, or risk management.
• Clearance Requirements: U.S. citizen; favorable Tier 2 Public Trust adjudication required before performance.
• Certification Requirements: Security+ required. CISA or CRISC preferred; ISC2 CGRC additionally preferred. Any other work-related qualifications needed for the role:
• Knowledge of NIST RMF, SP 800-53/800-171, federal FISMA/FedRAMP/Zero Trust, risk reporting, and mitigation. ATO-package and auditable evidence experience preferred. Salary Range: $148,000 to $168,000 The compensation range listed for this position represents the good faith salary range Diné Development Corporation (DDC) and its subsidiaries reasonably expect to pay for the role, in accordance with applicable state and local pay transparency laws. Actual compensation will be determined based on a variety of factors, including the position's responsibilities, the candidate's education, experience, skills, internal equity, market considerations, and any applicable collective bargaining agreements or legal requirements.
• About Us Diné Development Corporation (DDC) is a Navajo Nation-owned family of companies that provides government agencies and commercial organizations with high-quality IT, professional, environmental, and research and development services. DDC is dedicated to empowering the Navajo Nation and the communities we serve.
• Benefits Eligible full-time employees receive a comprehensive benefits package, including medical, dental, vision, life and disability coverage, retirement savings with company match, and paid time off. Additional benefits include voluntary supplemental benefits, access to an employee assistance program, and educational assistance with tuition reimbursement.
• Equal Opportunity & Compliance Statement This contractor and subcontractor shall abide by the requirements of 41 CFR 60-1.4(a), 60-300.5(a), and 60-741.5(a). These regulations prohibit discrimination against qualified individuals based on their status as protected veterans or individuals with disabilities, and prohibit discrimination against all individuals based on their race, color, religion, sex, sexual orientation, gender identity, national origin, or for inquiring about, discussing, or disclosing information about compensation, or any other basis prohibited by law. We participate in E-Verify. DDC is committed to providing equal employment opportunities to all applicants and employees. If you require a reasonable accommodation to participate in the application or interview process, please contact Recruiting for assistance.