Cyber Risk Assessment Analyst - Senior

Contract

DISA CTAS

Job Description

The Cyber Risk Assessment Analyst – Senior provides leadership in the execution of DISA IE cybersecurity tasks. This position ensures that baseline cybersecurity documentation is accurate and current, supports transition activities under IE6, and delivers comprehensive risk management services. The analyst synthesizes technical findings into actionable risk reports and ensures compliance with DISA and DoD cybersecurity policies.

Key Tasks and Responsibilities

• Develop/maintain cybersecurity baseline artifacts including CONOPS, IRPs, PPPs, SOPs documentation

• Evaluate newly released IAVMs, STIGs, and SRGs for applicability, and coordinate with ISSMs to prepare waiver requests when timelines cannot be met .

• Produce and deliver Risk Assessment Reports monthly and as required

• Prepare/submit POA&Ms of vulnerability discovery, and provide bi-monthly POA&M status reports

• Lead preparation of accreditation packages, prior to ATO expiration, ensuring timely and complete submissions

• Support transition activities by ensuring risk documentation, personnel certifications, and system artifacts are available during transition-out phases (FAR 52.237-3 compliance)

Education & Experience

Preferred but not all required cybersecurity experience (Bachelor’s degree or equivalent experience required):

• Command Cyber Readiness Inspection (CCRI)

• Site Assistance Visit (SAV)/ Assessment and Authorization (A&A)

• Cyber Self-Assessments

• Assist in the preparation of CVPA (Cooperative Vulnerability and Penetration Assessment)

• AA (Adversary Assessment)

• DISA Risk Management Executive (RME)

• Decision Support System (DSS)

• Auditing and reporting of systems, networks, documentation, RMF controls, DoD 8140.03 requirements, IAVMs, STIGs and DISA Task Order (DTO) and CYBERCOM Task Order (CTO)

Job Requirements: