Senior Cyber Risk & Assessment Analyst

Diné Development Corporation; Washington (District of Columbia); On-site; USD 148,000 - 168,000; Full time

Benefits offered by this job

Medical coverage

Dental coverage

Vision coverage

Life insurance

Disability coverage

Retirement plan with company match

Paid time off

Job summary

Diné Development Corporation (DDC) seeks a Cyber Risk & Assessment Analyst to assess cybersecurity risk, prepare authorization packages, and maintain audit-ready ATO evidence in alignment with NIST frameworks. This on-site role requires a U.S. citizen with Security+ and public trust readiness.

The position is contingent on contract award and offers a comprehensive benefits package. The analyst will coordinate risk registers, develop POA&Ms, and support FISMA reporting and control testing,

Qualifications

• Bachelor’s degree and at least 6 years of relevant cybersecurity experience, including 5 years conducting assessments, compliance evaluations, or risk management.
• U.S. citizen; favorable Tier 2 Public Trust adjudication required before performance.
• Security+ required; CISA/CRISC and ISC2 CGRC preferred.

Responsibilities

• Perform cybersecurity assessments, compliance evaluations, and internal control reviews aligned with NIST frameworks and DNFSB policy.
• Prepare and maintain authorization packages for assessment, including system security documentation, risk assessments, control narratives, and supporting evidence.
• Review technical evidence from infrastructure and security tools, document control effectiveness and identified risks, and develop mitigation recommendations.
• Maintain the quarterly risk registers and coordinate inputs to project management risk logs.
• Develop and update Plans of Action and Milestones (POA&Ms), track remediation owners and dates, and support monthly status reporting.
• Support ongoing authorization, FISMA reporting, internal control testing, and responses to assessment and audit documentation requests.
• Track evidence currency and authorization status against standards for 100% ATO sustainment and 95% evidence freshness.
• Contribute to updates of policies and procedures, explain risk findings to agency stakeholders, and provide backup across cybersecurity functions.

Skills

Analytical thinking

Risk assessment

Communication

Education

Bachelor's degree

Tools

NIST RMF tooling

FISMA/FedRAMP tooling

Job description

Diné Development Corporation (DDC) seeks a Cyber Risk & Assessment Analyst to assess cybersecurity risk, prepare authorization packages, and maintain audit-ready ATO evidence in alignment with NIST frameworks. This on-site role requires a U.S. citizen with Security+ and public trust readiness.

The position is contingent on contract award and offers a comprehensive benefits package. The analyst will coordinate risk registers, develop POA&Ms, and support FISMA reporting and control testing,