Senior Cybersecurity Analyst - Assessment & Authorization

Bishop & Company, Inc.; Virginia; On-site; USD 100,000 - 130,000; Full time

Benefits offered by this job

Excellent benefits

Career growth opportunities

Work-life balance

Job summary

Bishop & Company, Inc. seeks a Senior Cybersecurity Analyst – Assessment & Authorization to support Pearl Harbor Naval Shipyard (PHNSY). The role focuses on managing and renewing Authority-to-Operate (ATO) packages for DoD information systems within RMF, ensuring compliance and risk mitigation.

The candidate must reside in Oahu, be eligible for a U.S. government clearance, and be prepared for on-site responsibilities with opportunities for career growth and a strong benefits package.

Qualifications

• Bachelor’s degree in Cybersecurity, IT, or related field.
• 6–10 years in cybersecurity with at least 3 years in military security evaluations.
• A&A experience preferred.
• CISSP, CISM, or CAP certification required.
• CompTIA Security+ required.
• DoD systems knowledge and RMF familiarity.
• Proficiency with security assessment tools and methodologies.
• Strong understanding of network protocols, operating systems, and security architecture.

Responsibilities

• Develop detailed reports and executive-level presentations summarizing assessment results, risk analyses, and recommended mitigation actions.
• Maintain and update the A&A tracker.
• Perform comprehensive assessments of military information systems, networks, and platforms to identify configuration deviations and security policy non-compliance.
• Lead the execution of RMF activities, including security control evaluations, vulnerability assessments, and preparation of authorization documentation.
• Ensure adherence to DoD cybersecurity requirements such as AR 25-2, AR 380-19, and NIST SP 800-53, and contribute to the creation and refinement of security policies and procedures.
• Conduct in-depth analysis and validation of security controls to determine their effectiveness in reducing identified risks.
• Partner with incident response teams to investigate and resolve security events, providing technical expertise to determine root causes and implement corrective measures.
• Deliver guidance, mentorship, and training to junior analysts and staff on cybersecurity principles, tools, and best practice methodologies.

Skills

RMF knowledge

Security assessments

Leadership / mentorship

Education

Bachelor’s degree in Cybersecurity, IT, or related field

Tools

ServiceNow

Job description

Senior Cybersecurity Analyst – Assessment & Authorization Bishop & Company is seeking a Senior Cybersecurity Analyst – Assessment & Authorization to support Pearl Harbor Naval Shipyard (PHNSY).

In this role, you will be responsible for the management and support renewal of Authority-to-Operate (ATO) packages for Government information systems within the Risk Management Framework (RMF).

Our client prioritizes work-life balance, offers excellent benefits, and provides career growth opportunities.

Candidates must reside in Oahu and be available to interview immediately.

This is a full time, on site, role and requires the ability to obtain and maintain a U.S. government security clearance. Candidates must be eligible for a background investigation.

Responsibilities

• Develop detailed reports and executive-level presentations summarizing assessment results, risk analyses, and recommended mitigation actions
• Maintain and update the Assessment & Authorization (A&A) tracker
• Perform comprehensive assessments of military information systems, networks, and platforms to identify configuration deviations and security policy non?compliance
• Lead the execution of RMF activities, including security control evaluations, vulnerability assessments, and preparation of authorization documentation
• Ensure adherence to DoD cybersecurity requirements such as AR 25?2, AR 380?19, and NIST SP 800?53, and contribute to the creation and refinement of security policies and procedures
• Conduct in-depth analysis and validation of security controls to determine their effectiveness in reducing identified risks
• Partner with incident response teams to investigate and resolve security events, providing technical expertise to determine root causes and implement corrective measures
• Deliver guidance, mentorship, and training to junior analysts and staff on cybersecurity principles, tools, and best practice methodologies

Requirements

• Bachelor’s degree in Cybersecurity, Information Technology, or a related field
• 6-10 years of experience in cybersecurity roles, with at least 3 years specializing in military technical security evaluations
• Previous Assessment & Authorization (A&A) experience highly desired
• ServiceNow ticket management experience preferred
• CISSP, CISM, or CAP Certification required
• CompTIA Security+ Proven experience in Risk Management Frameworks
• Clear understanding of DoD systems
• Proficiency in security assessment tools and methodologies
• Strong understanding of network protocols, operating systems, and security architecture

This position may require night, weekend or holiday support.

Compensation is unique to each candidate and relative to the skills and experience they bring to the position. The salary range for this position is typically $100-130K annually. This does not guarantee a specific salary as compensation is based upon multiple factors such as education, experience, certifications, and other requirements, and may fall outside of the above-stated range.

Equal Opportunity Employer – Disability and Veteran