Senior Cyber Risk & Compliance Analyst – Remote

Socket.dev; Springfield (VA); On-site; USD 95,000 - 105,000; Full time

Benefits offered by this job

Health insurance

Dental insurance

Vision insurance

401(k) plan

Paid Time Off

Job summary

Connected Logistics is seeking a Senior Risk and Compliance Analyst to support cybersecurity governance, enterprise risk management, compliance oversight, audit readiness, and continuous monitoring for the VA COSE mission.

The ideal candidate will lead RMF, NIST, and FedRAMP programs, perform risk assessments, develop remediation strategies, and coordinate audits across enterprise environments while advising stakeholders on regulatory alignment and security control effectiveness.

Qualifications

• Bachelor's degree or equivalent in a related field; IAT/IAM/IASAE certifications may substitute.
• Seven years of information security experience with risk and compliance focus.
• Experience supporting large federal agencies or equivalents (VA, DoD, IRS, GSA).

Responsibilities

• Lead cybersecurity risk and compliance initiatives across enterprise technology environments.
• Conduct risk assessments, compliance reviews, and security control evaluations.
• Support RMF, FISMA, NIST, FedRAMP, and VA requirements.
• Develop risk analyses, compliance reports, and remediation strategies.
• Coordinate internal and external audit activities.
• Support vulnerability management and POA&M tracking.
• Assist in policy development and maintenance.
• Support C-SCRM initiatives and continuous monitoring.

Skills

Cybersecurity

Risk management

Regulatory compliance

Audit readiness

Stakeholder engagement

Education

Bachelor's degree in Cybersecurity

Tools

Azure

AWS

FedRAMP

Infrastructure as Code

Policy as Code

Cloud security tooling

Job description

Connected Logistics is seeking a Senior Risk and Compliance Analyst to support cybersecurity governance, enterprise risk management, compliance oversight, audit readiness, and continuous monitoring for the VA COSE mission.

The ideal candidate will lead RMF, NIST, and FedRAMP programs, perform risk assessments, develop remediation strategies, and coordinate audits across enterprise environments while advising stakeholders on regulatory alignment and security control effectiveness.