RemoteLeaf Logo
Log in Sign up

Risk and Compliance Analyst

4 hours, 2 minutes ago
United States
Full-time
Senior
Compliance Manager
Legal
Cybersecurity DevSecOps
Apply Now
9th Way Insignia

9th Way Insignia

9th Way Insignia is a service disabled veteran owned small business (SDVOSB) that provides results oriented technical solutions to federal government customers. Our team offers 30+ years of experience delivering next generation technology solutions. We...

Internet Software & Services
51-250
Founded 2018
View All Jobs 3

Description

  • Conduct cybersecurity risk assessments for systems, applications, technologies, processes, and enterprise initiatives.
  • Identify, evaluate, document, and monitor risks, vulnerabilities, control gaps, compliance deficiencies, and residual risks.
  • Develop risk-management processes, mitigation strategies, corrective actions, monitoring plans, and status reports.
  • Perform compliance assessments against NIST, OMB, VA, FISMA/FICAM, RMF, ATO, and other applicable Federal requirements.
  • Support internal and external audits, inspections, assessments, and reviews, including evidence collection and validation.
  • Track audit findings and remediation actions through resolution and verify corrective-action effectiveness.
  • Develop and maintain remediation reports, security risk analyses, specialized security posture reports, dashboards, and briefings.
  • Perform security architecture, configuration, baseline, and compliance gap analyses; maintain requirements traceability matrices.
  • Review and maintain cybersecurity policies, procedures, standards, guidelines, and governance documentation.
  • Collaborate with Government stakeholders, auditors, system owners, engineers, architects, DevSecOps teams, and technical SMEs; occasional onsite visits and travel may be required.

Requirements

  • At least 7 years of information security experience, including at least 5 years in risk and compliance at a large company or Government agency comparable to GSA, IRS, DoD, or VA.
  • An advanced degree in a related field may substitute for up to 2 years of required experience.
  • Expertise in risk management, compliance, auditing, or related organizational functions.
  • Expertise conducting internal and external audits against regulatory requirements and organizational policies.
  • Expertise developing and implementing risk-management programs, including assessments, mitigation, and continuous monitoring.
  • Expertise in cybersecurity policy development, documentation, and enforcement.
  • Experience handling and reporting compliance issues and coordinating with regulatory bodies.
  • Bachelor’s degree in business, cybersecurity, computer science, information systems, information assurance, or a related field preferred.
  • Relevant certifications preferred, including CASP+/SecurityX, CCISO, CISA, CISM, CISSP, CISSP-ISSAP, CISSP-ISSEP, GCED, GCIH, GSLC, or CCNP Security.
  • Ability to travel up to twice per year; selected applicants must undergo a security investigation and may need eligibility for classified information access.

Benefits

  • Salary range of $98,135.18–$115,000 USD.
  • Medical, dental, and vision insurance.
  • 401(k), life insurance, accidental death and dismemberment, short-term disability, and long-term disability coverage.
  • Paid time off and paid holidays.
  • Telehealth, FSA, and HSA options.
  • Employee Assistance Program and travel assistance.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Crypto.com

Vice President of Sanctions and Financial Crimes Intelligence

Crypto.com 1K-5K Capital Markets

Crypto.com is seeking a Vice President of Sanctions and Financial Crime Intelligence to lead North American sanctions controls, financial crime intelligence, and compliance modernization across its digital asset platform.

United States Full-time Executive Compliance Manager
Machine Learning
4 hours, 32 minutes ago
Planet Technologies

Compliance Consultant

Planet Technologies 251-1K Internet Software & Services

Planet Technologies is hiring a Compliance Consultant to advise public-sector, defense, commercial, and state/local customers on compliance strategies, assessments, and documentation across cybersecurity risk management frameworks.

United States Full-time Mid Level Compliance Manager
$120k-$210k
Azure HIPAA
4 hours, 47 minutes ago
Zocks | AI for Advisors

Trust & Compliance Operations Manager

Zocks | AI for Advisors 51-200 information technology & services

Zocks is hiring a Trust & Compliance Operations Manager to own vendor diligence and trust operations for its financial-services SaaS business, helping shorten sales cycles and build buyer confidence.

United States Full-time Mid Level Compliance Manager Operations Manager
$150k-$175k
4 hours, 47 minutes ago
Monzo

Fraud Compliance Manager

Monzo 1K-5K Banks

Monzo is hiring a Fraud Compliance Manager in its second-line Fraud and Financial Crime Compliance team to oversee, challenge, and assure fraud risk management across the UK banking business.

United Kingdom Full-time Mid Level Compliance Manager
$91k-$114k
4 hours, 47 minutes ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers