Senior Cyber Risk & RMF Assessment Analyst

RED CANYON TECHNOLOGIES LLC; Washington (District of Columbia); On-site; USD 148,000 - 168,000; Full time

Benefits offered by this job

Medical benefits

Dental benefits

Tuition assistance

Job summary

Diné Development Corporation (DDC) is seeking a Cyber Risk & Assessment Analyst in the Washington, DC area to assess DNFSB cybersecurity risk and prepare authorization packages. This role requires a U.S.

citizen with favorable Tier 2 Public Trust adjudication and Security+ certification, plus 5+ years of related work. You will manage POA&Ms, maintain evidence, and support FISMA reporting while coordinating with project management and agency stakeholders to sustain 100% ATO and 95% evidence

Qualifications

• Bachelor’s degree and at least 6 years of cybersecurity experience.
• Experience conducting cybersecurity assessments, compliance evaluations, or risk management.
• Knowledge of NIST RMF, SP 800-53/800-171, and FISMA/FedRAMP/Zero Trust.

Responsibilities

• Perform cybersecurity assessments, compliance evaluations, and internal control reviews aligned with NIST frameworks and policy.
• Prepare and maintain authorization packages for assessment, including system security documentation, risk assessments, control narratives, and evidence.
• Review evidence from infrastructure and security tools, document control effectiveness and risks, and propose mitigations.
• Maintain the quarterly risk register and coordinate inputs to risk and issue logs.
• Develop and update POA&Ms, track remediation owners and dates, and support status reporting.

Skills

Cyber risk assessment

Compliance evaluation

Risk management

NIST RMF knowledge

Education

Bachelor's degree

Tools

FISMA/FedRAMP knowledge

Job description

Diné Development Corporation (DDC) is seeking a Cyber Risk & Assessment Analyst in the Washington, DC area to assess DNFSB cybersecurity risk and prepare authorization packages. This role requires a U.S.

citizen with favorable Tier 2 Public Trust adjudication and Security+ certification, plus 5+ years of related work. You will manage POA&Ms, maintain evidence, and support FISMA reporting while coordinating with project management and agency stakeholders to sustain 100% ATO and 95% evidence