Risk & Compliance Analyst

PingWind, Inc.; United States; Remote; USD 77,000 - 107,000; Full time

Benefits offered by this job

Eleven Federal Holidays

Paid Time Off

Parental Leave

Health plan options and employer 401k

Job summary

PingWind, Inc. seeks a Risk & Compliance Analyst to support a large Federal Government client. You will apply cybersecurity risk management, compliance, audit, and continuous monitoring to align with Federal requirements and policies.

Collaborate with technical teams, program leadership, government stakeholders, and auditors to strengthen security posture and enable risk-based decision-making.

Qualifications

• Minimum 7 years of information security experience with at least 5 years in risk and compliance.
• Bachelor's degree in a relevant field is required; advanced degree may substitute for up to 2 years.
• Ability to obtain and maintain VA background investigation.

Responsibilities

• Conduct cybersecurity risk assessments and compliance reviews.
• Support internal and external audits against Federal requirements.
• Perform risk assessment, mitigation, and continuous monitoring activities.
• Develop and maintain cybersecurity policies, procedures, and docs.
• Track and report compliance issues and coordinate with technical teams.
• Support VA audit planning, documentation, inquiries, and submissions.
• Analyze findings and propose prioritized remediation.

Skills

Cybersecurity risk assessments

Compliance reviews

Audits

Stakeholder collaboration

Education

Bachelor's degree

Tools

RMF

FISMA

NIST

ATO

Job description

Location: Remote; travel may be required in support of meetings, training, presentations, or briefings with project stakeholders

Required Clearance: Ability to obtain and maintain the required VA background investigation/suitability determination

Certifications: Certification in one or more of the following: IAT III, IAM III or IASAE III certifications. IAT III/ IAM III / IASAE III certifications may be substituted for a relevant Bachelor’s degree or 4 years of relevant experience

Required Education: Bachelor’s degree in Business Administration, Business Management, Cybersecurity, Computer Science, Information Systems, Information Assurance, Information Security, Information identification Resource Management, or related fields.

Required Experience: Minimum of 7 years of Information Security Experience of which at least 5 years are of risk and compliance experience at a large company or Government agency similar in size/scope to GSA, IRS, DoD or VA. An advanced degree (e.g. Master’s or PhD) in related field may substitute for up to 2 years of the required experience. Expertise handling and reporting compliance issues and coordinating with regulatory bodies.

Description

PingWind is seeking a highly skilled and experienced Risk & Compliance Analyst to join our dynamic team supporting a large Federal Government client. Apply expertise in cybersecurity risk management, compliance, audit, and continuous monitoring to assess organizational risk and ensure alignment with Federal security requirements and policies. The Risk & Compliance Analyst will collaborate with technical teams, program leadership, Government stakeholders, and auditors to strengthen the client's cybersecurity and compliance posture and support effective risk-based decision-making.

Responsibilities

• Conduct cybersecurity risk assessments and compliance reviews to identify gaps and remediation needs
• Support internal and external audits against applicable Federal requirements and organizational policies
• Perform risk, assessment, mitigation, tracking, and continuous monitoring activities
• Develop and maintain cybersecurity policies, procedures, and compliance documentation
• Track and report compliance issues and coordinate corrective actions with technical teams
• Support VA audit planning, documentation collection, auditor inquiries, and required submissions
• Analyze findings and develop prioritized remediation recommendations

Requirements

• Ability to obtain and maintain required VA background investigation/suitability and system access
• Experience conducting cybersecurity risk assessments, compliance reviews, and audits
• Experience developing risk mitigation strategies and supporting continuous monitoring

Preferred Qualifications

• VA/Federal cybersecurity compliance experience
• RMF, FISMA, NIST, or ATO experience
• Audit remediation or POA&M experience

About PingWind

PingWind is focused on delivering outstanding services to the federal government. We have extensive experience in the fields of cybersecurity, development, IT infrastructure, supply chain management and other professional services such as system design and continuous improvement. PingWind is an SBA certified Service-Disabled Veteran-Owned Small Business (SDVOSB) with offices in Northern Virginia and Huntsville AL.
www.PingWind.com

Our benefits include:

• Eleven Federal Holidays
• Paid Time Off accrued each pay period
• Parental Leave
• Three medical plan choices with generous employer contribution
• Dental and Vision Insurance
• Company paid Short-Term and Long-Term Disability
• Company paid Life and AD&D Insurance
• 401k with competitive matching and vesting schedule
• Continuing education assistance
• Short Term / Long Term Disability & Life Insurance
• Medical, Dependent Care and Commuter Flexible Spending Accounts
• Employee Assistance Program
• Wellness benefits include Calm Health app and WellHub gym subsidy (formerly GymPass)
• 529 College Savings Plan
• Legal Insurance
• Pet Insurance

Veterans are encouraged to apply

Salary Range

77K - 107K

The pay range for this job is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) job responsibilities, education, certifications, experience, as well as internal equity mapping and alignment with market data, or other applicable laws.

PingWind, Inc. does not discriminate in employment opportunities, terms, and conditions of employment, or practices on the basis of race, age, gender, religious or political beliefs, national origin or heritage, disability, sexual orientation, or any characteristic protected by law

We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.