Remote Cyber Risk & Compliance Analyst

Triumph Enterprises, Inc; Washington, Northern (District of Columbia, KY); Hybrid; USD 110,000 - 150,000; Full time

Job summary

Triumph Enterprises, Inc. is building a team for a VA OIT/OIS program focused on enterprise cybersecurity architecture and engineering.

We seek Risk and Compliance Analysts to own the risk, compliance, and supply chain reporting spine for the program. The role reports on a weekly risk analysis rhythm, operating a full Cyber Supply Chain Risk Management program, and delivering SBOM validation and compliance reporting.

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Information Systems, Information Assurance, Information Security, Information Resource Management, Business Administration, Business Management, or a related field.
• Advanced degree may substitute for up to 2 years of experience, to a floor of 6 years.
• Experience in risk management, compliance, audit, or related roles within an organization.
• Experience conducting internal and external audits for regulatory compliance.
• Experience developing and implementing risk management programs and continuous monitoring.
• Experience in policy development, documentation, and enforcement.
• Experience coordinating with regulatory bodies and reporting compliance issues.
• Ability to sustain a weekly reporting cadence in a federal environment.

Responsibilities

• Produce the Security Risk Analysis Report weekly (52 per option year).
• Build and operate the Cyber Supply Chain Risk Management program with framework and scoring rubric.
• Own SBOM validation procedures and quarterly SBOM compliance reporting.
• Maintain the critical supplier inventory and risk prioritization; implement banned vendor automation.
• Report FISMA and CISA compliance quarterly and meet data quality thresholds.
• Produce security posture and remediation reports and requirements traceability matrices.
• Support cyber engineering modernization with risk analysis and continuous monitoring.

Skills

Risk management

Compliance

Auditing

Continuous monitoring

Policy development

Reporting cadence

Education

Bachelor's degree in Cybersecurity or related field

Job description

Triumph Enterprises, Inc. is building a team for a VA OIT/OIS program focused on enterprise cybersecurity architecture and engineering.

We seek Risk and Compliance Analysts to own the risk, compliance, and supply chain reporting spine for the program. The role reports on a weekly risk analysis rhythm, operating a full Cyber Supply Chain Risk Management program, and delivering SBOM validation and compliance reporting.