Federal Cybersecurity Risk & Compliance Analyst

9th Way Insignia; United States; Remote; USD 98,000 - 115,000; Full time

Benefits offered by this job

Healthcare benefits

401(k) plan

Job summary

9th Way Insignia seeks an Engineer, 3, Risk and Compliance Analyst to advance cybersecurity risk management for federal projects. The role emphasizes risk assessments, compliance with VA and federal standards, and continuous improvement of security controls across systems and programs.

Applicants should have extensive information security experience, relevant certifications, and the ability to collaborate with government stakeholders and engineering teams to maintain accreditation and secure

Qualifications

• Minimum of7 years of Information Security experience with at least 5 years in risk and compliance
• Experience at large company or government agency similar in size to VA/DoD/IRS/DoJ
• Proven ability to conduct internal and external audits to assess regulatory compliance

Responsibilities

• Perform and support cybersecurity risk assessments for information systems and programs
• Identify and monitor cybersecurity risks, vulnerabilities, and control gaps
• Develop and implement risk-management programs including mitigation and reporting
• Support RMF, ATO processes, and compliance activities for VA/Federal requirements
• Coordinate with auditors, government stakeholders, and technical teams throughout assessments

Skills

Cyber risk assessments

Risk management

Compliance

Audit support

NIST RMF

Education

Bachelor’s degree in related field

CASP+/CISA/CISSP (certifications)

Advanced degree may substitute experience

Tools

NIST 800-53

FISMA / ATO processes

Job description

9th Way Insignia seeks an Engineer, 3, Risk and Compliance Analyst to advance cybersecurity risk management for federal projects. The role emphasizes risk assessments, compliance with VA and federal standards, and continuous improvement of security controls across systems and programs.

Applicants should have extensive information security experience, relevant certifications, and the ability to collaborate with government stakeholders and engineering teams to maintain accreditation and secure