Junior Cyber Risk Analyst — Risk & Mitigation Specialist

asmexternalcareersite; Ashburn (VA); On-site; USD 110,000 - 150,000; Full time

Job summary

ASM Research is seeking a Cyber Risk Management Analyst to support identification, communication, and distribution of cybersecurity risks and actionable mitigations within the agency's IT environment.

You will work with operational teams to identify tactical risks, review change requests, prioritize vulnerability remediation, and contribute to strategic risk assessments and risk profiles. Strong collaboration and communication skills are essential.

Qualifications

• Bachelor's Degree in Computer Science or a related field or equivalent experience.
• Minimum 3 years of information security experience, including cyber risk management.
• US citizenship with ability to pass federal background check.

Responsibilities

• Identify tactical cyber risks with operations teams (VAT, SOC, CTI).
• Review and recommend approvals of tactical level change requests.
• Prioritize remediation of vulnerabilities.
• Use MITRE ATT&CK to identify gaps and guide funding for remediation across multiple systems.
• Support strategic risk assessment through collaboration with SCAs, ISSMs, ISSOs, and system owners.
• Produce risk profiles and assist in risk acceptance memoranda and POA&Ms.
• Communicate cyber risk posture to senior management and stakeholders.

Job description

ASM Research is seeking a Cyber Risk Management Analyst to support identification, communication, and distribution of cybersecurity risks and actionable mitigations within the agency's IT environment.

You will work with operational teams to identify tactical risks, review change requests, prioritize vulnerability remediation, and contribute to strategic risk assessments and risk profiles. Strong collaboration and communication skills are essential.