Senior Cybersecurity Analyst – Assessment & Authorization

Bishop & Company, Inc.; Honolulu (HI); On-site; USD 100,000 - 130,000; Full time

Job summary

Bishop & Company, Inc. in Honolulu, Hawaii, seeks a Senior Cybersecurity Analyst – Assessment & Authorization to support Pearl Harbor Naval Shipyard (PHNSY). This on-site role requires RMF expertise and the ability to obtain/maintain a U.S. government security clearance.

You will lead RMF assessments, produce executive reports, mentor junior staff, and ensure DoD/NIST compliance across systems.

Qualifications

• Bachelor's degree required in Cybersecurity, IT or related field.
• 6–10 years in cybersecurity with at least 3 years in military security evaluations.
• Experience with A&A processes is highly desired.
• DoD RMF experience and knowledge of AR 25-2, AR 380-19, NIST SP 800-53.
• Active or ability to obtain DoD security clearance.

Responsibilities

• Develop reports and executive presentations of assessment results and risk analyses; maintain A&A tracker.
• Assess military information systems for configuration deviations and policy noncompliance.
• Lead RMF activities: control evaluations, vulnerability assessments, authorization docs.
• Ensure compliance with DoD requirements and security policies.
• Analyze security controls for effectiveness and risk reduction.
• Collaborate with incident response to investigate and address security events.
• Mentor and train junior analysts on cybersecurity principles and tools.

Skills

RMF knowledge

Security controls

Risk assessment

Incident response

Mentoring

Education

Bachelor's degree in Cybersecurity or related field

Tools

ServiceNow

Job description

Bishop & Company is seeking a Senior Cybersecurity Analyst – Assessment & Authorization to support Pearl Harbor Naval Shipyard (PHNSY).

***Candidates must reside in Oahu and be available to interview immediately***

In this role, you will be responsible for the management and support renewal of Authority-to-Operate (ATO) packages for Government information systems within the Risk Management Framework (RMF).

Our client prioritizes work-life balance, offers excellent benefits, and provides career growth opportunities.

***Candidates must reside in Oahu and be available to interview immediately. This is a full time, on site, role and requires the ability to obtain and maintain a U.S. government security clearance. Candidates must be eligible for a background investigation.***

Responsibilities:

• Develop detailed reports and executive-level presentations summarizing assessment results, risk analyses, and recommended mitigation actions; maintain and update the Assessment & Authorization (A&A) tracker.
• Perform comprehensive assessments of military information systems, networks, and platforms to identify configuration deviations and security policy non?compliance.
• Lead the execution of RMF activities, including security control evaluations, vulnerability assessments, and preparation of authorization documentation.
• Ensure adherence to DoD cybersecurity requirements such as AR 25?2, AR 380?19, and NIST SP 800?53, and contribute to the creation and refinement of security policies and procedures.
• Conduct in-depth analysis and validation of security controls to determine their effectiveness in reducing identified risks.
• Partner with incident response teams to investigate and resolve security events, providing technical expertise to determine root causes and implement corrective measures.
• Deliver guidance, mentorship, and training to junior analysts and staff on cybersecurity principles, tools, and best practice methodologies.

Requirements:

• Bachelor’s degree in Cybersecurity, Information Technology, or a related field.
• 6-10 years of experience in cybersecurity roles, with at least 3 years specializing in military technical security evaluations. Previous Assessment & Authorization (A&A) experience highly desired.
• ServiceNow ticket management experience preferred.
• CISSP, CISM, or CAP Certification required.
• CompTIA Security+
• Proven experience in Risk Management Frameworks.
• Clear understanding of DoD systems.
• Proficiency in security assessment tools and methodologies.
• Strong understanding of network protocols, operating systems, and security architecture.

This position may require night, weekend or holiday support

Compensation is unique to each candidate and relative to the skills and experience they bring to the position. The salary range for this position is typically $100-130K annually. This does not guarantee a specific salary as compensation is based upon multiple factors such as education, experience, certifications, and other requirements, and may fall outside of the above-stated range.

Equal Opportunity Employer – Disability and Veteran