risk management framework analyst

Leidos

<div><p><b>Description</b>
</p><p>The mission of the DHS Chief Information Security Officer Directorate (DHS CISOD) is to support the Department&rsquo;s implementation of all applicable regulatory requirements including the Federal Information Security Modernization Act of 2014 (FISMA), relevant Office of Management and Budget (OMB) Circulars, Executive Orders, Federal laws, directives, policies, and regulations. The DHS CISOD&rsquo;s mission is to also provide the Department of Homeland Security (DHS) a secure and trusted computing environment. The DHS CISOD assists in ensuring Department compliance with information security requirements. Information security is an essential business function, critical to enabling DHS to conduct its operations and deliver service to the public.</p><p>
Leidos is seeking an experienced <b>IV&amp;V Senior Analyst</b> to support DHS CISOD in ensuring DHS-wide compliance with federal information security laws, regulations, mandates, and standards. The selected candidate will perform independent verification and validation activities over Component validation and remediation efforts, provide detailed analysis of security documentation and control implementations, and deliver actionable recommendations to support risk-informed decision making across the enterprise.</p><p></p><p>
The IV&amp;V Senior Analyst will serve as a subject matter expert in cybersecurity compliance and control validation, working closely with DHS Components and government stakeholders to assess remediation packages, evaluate security documentation, monitor corrective actions, and help ensure the quality, consistency, and timeliness of IV&amp;V support provided to CISOD. This role requires strong familiarity with DHS cybersecurity processes, Risk Management Framework (RMF) requirements, and federal security guidance, as well as the ability to communicate technical findings clearly to both technical and non-technical audiences.</p><p></p><p><b>
Primary Responsibilities:</b></p><ul><li><p>
Perform IV&amp;V testing and analysis over Component V&amp;V packages for remediated IT security controls, including review of supporting evidence, validation of testing adequacy, and identification of gaps or inconsistencies.</p></li><li><p>
Review Component-submitted remediation and validation documentation to determine compliance with DHS and federal cybersecurity requirements and provide clear, risk-based feedback.</p></li><li><p>
Track submitted V&amp;V packages through review and approval workflows, including coordination of CISOD and OCFO signatures and status updates for reporting purposes.</p></li><li><p>
Evaluate System Security Plans (SSPs), security authorization artifacts, and other system documentation to determine whether required controls have been properly implemented and documented across applicable system layers.</p></li><li><p>
Assist in performing Security Authorization Reviews for CFO-designated and ancillary systems, including analysis of control implementation statements, observations, and documentation sufficiency.</p></li><li><p>
Review Component IT commitment letters, provide comments, and monitor testing and passing status against stated commitments.</p></li><li><p>
Develop, maintain, and improve QA processes, checklists, traceability matrices, and standard guidance documents to enhance consistency and repeatability across IV&amp;V activities.</p></li><li><p>
Provide measurable data, status updates, and reporting inputs that support monthly IT audit reporting and executive-level visibility into remediation and compliance trends.</p></li><li><p>
Coordinate with government and contractor stakeholders to resolve issues, clarify findings, and improve the quality of Component submissions.</p></li><li><p>
Contribute to process improvements, GRC updates, and standardization efforts related to assessments, authorizations, and remediation validation activities.</p></li><li><p>
May provide guidance and mentoring to junior staff and support internal quality reviews as needed.</p></li></ul><p></p><p><b>
Primary Qualifications:</b></p><ul><li><p><b>
Must be able to obtain a DHS Security Clearance.</b></p></li><li><p>
Bachelor&rsquo;s degree and 8+ years of experience in IV&amp;V, cybersecurity compliance, RMF, security controls assessment, or a related information assurance/cybersecurity field; or Master&rsquo;s degree and 6+ years of relevant experience.</p></li><li><p>
Experience supporting DHS or other Federal cybersecurity compliance and assessment activities.</p></li><li><p>
Strong knowledge of NIST RMF, FISMA, FedRAMP, FIPS, NIST guidance, and applicable OMB and DHS cybersecurity policies and procedures.</p></li><li><p>
Experience reviewing security authorization documentation, remediation packages, SSPs, and control validation evidence.</p></li><li><p>
Ability to analyze technical documentation, identify compliance gaps, and provide practical, risk-based recommendations.</p></li><li><p>
Experience developing reports, metrics, and written products for government stakeholders.</p></li><li><p>
Strong written and verbal communication skills and the ability to work effectively in a collaborative, fast-paced environment.</p></li></ul><p>
If you're looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo &mdash; because the mission demands it. We're not hiring followers. We're recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We're already at step 30 &mdash; and moving faster than anyone else dares.</p><h2 class="jobSectionHeader"><b>
Original Posting:</b></h2>
April 10, 2026<p></p><p><br>
For U.S. Positions: While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above.</p><p></p><h2 class="jobSectionHeader"><b><br>
Pay Range:</b></h2>
Pay Range $92,300.00 - $166,850.00<p></p><p>
The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.</p><p></p><p><b>
About Leidos</b></p><p></p><p>
Leidos is an industry and technology leader serving government and commercial customers with smarter, more efficient digital and mission innovations. Headquartered in Reston, Virginia, with 47,000 global employees, Leidos reported annual revenues of approximately $16.7 billion for the fiscal year ended January 3, 2025. For more information, visit www.Leidos.com.</p><p></p><p><b>
Pay and Benefits</b></p><p></p><p>
Pay and benefits are fundamental to any career decision. That's why we craft compensation packages that reflect the importance of the work we do for our customers. Employment benefits include competitive compensation, Health and Wellness programs, Income Protection, Paid Leave and Retirement. More details are available at www.leidos.com/careers/pay-benefits.</p><p></p><p><b>
Securing Your Data</b></p><p></p><p>
Beware of fake employment opportunities using Leidos&rsquo; name. Leidos will never ask you to provide payment-related information during any part of the employment application process (i.e., ask you for money), nor will Leidos ever advance money as part of the hiring process (i.e., send you a check or money order before doing any work). Further, Leidos will only communicate with you through emails that are generated by the Leidos.com automated system &ndash; never from free commercial services (e.g., Gmail, Yahoo, Hotmail) or via WhatsApp, Telegram, etc. If you received an email purporting to be from Leidos that asks for payment-related information or any other personal information (e.g., about you or your previous employer), and you are concerned about its legitimacy, please make us aware immediately by emailing us at LeidosCareersFraud@leidos.com.</p><p>
If you believe you are the victim of a scam, contact your local law enforcement and report the incident to the U.S. Federal Trade Commission.</p><p></p><p><b>
Commitment to Non-Discrimination</b></p><p></p><p>
All qualified applicants will receive consideration for employment without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, or any other basis prohibited by law. Leidos will also consider for employment qualified applicants with criminal histories consistent with relevant laws.</p></div>

IV&V Senior Analyst

Systems Planning and Analysis, Inc. (SPA)

<div>Overview:
<div>
Systems Planning and Analysis, Inc. (SPA) delivers high-impact, technical solutions to complex national security issues. With over 50 years of business expertise and consistent growth, we are known for continuous innovation for our government customers, in both the US and abroad. Our exceptionally talented team is highly collaborative in spirit and practice, producing <i>Results that Matter</i>. Come work with the best! We offer opportunity, unique challenges, and clear-sighted commitment to the mission. SPA: Objective. Responsive. Trusted.</div><div><br>
</div><div>The Undersea Technology Portfolio, within SPA's Sea, Land, &amp; Air Division, conducts rigorous and objective analyses to enable the Navy and other DoD organizations to make decisions, plans, and strategies to deliver emerging undersea technologies and warfighting capabilities. We support clients across the undersea and naval special warfare enterprises, including those within resourcing and requirements, acquisition, and science and technology.</div><div></div><div><br>
SPA is seeking an IT Support Specialist to support NAVSEA's Naval Special Warfare Program Office.#FC #Dice</div>
Responsibilities:
<div>
Provide cybersecurity and Risk Management Framework support to NAVSEA PMS 340, including developing and maintaining RMF documentation, managing eMASS entries, conducting security control assessments, supporting system security engineering activities, coordinating with NAVSEA cybersecurity stakeholders, performing vulnerability and STIG reviews, and ensuring program compliance with DoD, DON, and NAVSEA cybersecurity policies.</div>
Qualifications:
<div><b>
Required Qualifications</b></div><ul><li><div>
Bachelor&rsquo;s degree in a technical or managerial related discipline (a high school diploma or HS equivalency certificate is acceptable with additional years of experience)</div></li><li><div><br>
4+ years of relevant cybersecurity or information assurance experience</div></li><li><div>
Demonstrated experience with RMF, eMASS, NIST SP 800-53 controls, and DoD cybersecurity compliance</div></li><li><div>
DoD 8570/8140 baseline certification (e.g., Security+ CE, CISSP, or equivalent)</div></li><li><div>
Active DoD Secret clearance and the ability to maintain it throughout employment</div></li></ul><h3 class="jobSectionHeader"><b>
Desired Qualifications</b></h3><ul><li><div>
Experience supporting NAVSEA, PEO USC, or Navy acquisition programs</div></li><li><div>
Familiarity with STIGs, ACAS, HBSS, and vulnerability management tools</div></li><li><div>
Background in system security engineering or technical review of Navy systems</div></li></ul></div>

IT Support Specialist

TDI (Tetrad Digital Integrity)

<div>
 Tetrad Digital Integrity (TDI) is a cybersecurity firm built for high-consequence environments where mission, complexity, and trust intersect. Our single focus has been delivering cyber solutions to effectively manage risk &amp; the business of cyber for 25 years!
 <br/>
 <br/>
 TDI is seeking a Junior Cloud RMF Analyst to support RMF and security execution for a mission-critical cloud-hosted defense system. This is a growth role for an early-career cybersecurity professional who is organized, coachable, mission-focused, and ready to build real-world experience in DoD cloud security and RMF operations. The role is designed for candidates with a solid foundation in cybersecurity, an active clearance, and the discipline to operate in a high-visibility environment where accuracy, follow-through, and customer trust matter.
 <br/>
 This is not a passive documentation role, but it is also not a sink-or-swim senior ISSO position. You will work alongside experienced ISSOs, ISSMs, and engineering teams to support the RMF engine room: maintaining artifact quality, tracking POA&amp;Ms, collecting and organizing evidence, supporting Continuous Monitoring, and helping ensure that documentation stays aligned to system reality as the environment evolves. If you are the kind of person who learns quickly, writes clearly, stays organized under pressure, and wants to grow into a cloud-savvy ISSO role supporting consequential national security systems, we want to meet you.
 <br/>
 <em>
  <strong>
   This position will require hybrid commute to the DC area.
   <br/>
  </strong>
 </em>
 <strong>
  RESPONSIBILITIES:
 </strong>
 <ul>
  <li>
   Support day-to-day RMF execution across the system lifecycle under the guidance of senior cybersecurity staff
  </li>
  <li>
   Assist with development and maintenance of RMF artifacts including SSPs, SAR support materials, POA&amp;Ms, control implementation details, evidence mappings, and supporting documentation
  </li>
  <li>
   Collect, organize, and maintain evidence needed to support assessments, audits, Continuous Monitoring, and authorization activities
  </li>
  <li>
   Support POA&amp;M management with discipline: track remediation items, owners, due dates, status updates, and closure evidence
  </li>
  <li>
   Help ensure documentation, evidence, and system reality remain aligned as approved changes occur through normal governance and configuration management processes
  </li>
  <li>
   Support Continuous Monitoring activities by maintaining artifact freshness, tracking recurring deliverables, and helping prepare metrics and status updates
  </li>
  <li>
   Review vulnerability scan outputs, STIG findings, and remediation documentation to support compliance tracking and risk reduction efforts
  </li>
  <li>
   Coordinate with engineering, platform, and DevSecOps teams to gather evidence and confirm implementation details for security controls
  </li>
  <li>
   Support security documentation and control traceability for cloud-hosted environments, including systems using modern platforms and managed cloud services
  </li>
  <li>
   Contribute to process improvement efforts that reduce manual compliance work and improve quality, consistency, and audit readiness
  </li>
  <li>
   Build practical knowledge of DoD RMF, NIST SP 800-53, cloud security concepts, and real-world control implementation in operational environments
  </li>
 </ul>
 <strong>
  QUALIFICATIONS:
 </strong>
 <ul>
  <li>
   Active Secret clearance
  </li>
  <li>
   Bachelor&rsquo;s degree in cybersecurity, information systems, computer science, engineering, or a related field, or equivalent relevant experience
  </li>
  <li>
   1&ndash;2 years of experience in cybersecurity, cloud security, compliance, risk management, IT operations, or related technical work
  </li>
  <li>
   Security+ certification
  </li>
  <li>
   Foundational knowledge of RMF, NIST SP 800-53, FedRAMP, or related cybersecurity/compliance frameworks
  </li>
  <li>
   Basic familiarity with one or more cloud platforms such as AWS, Azure, or GCP, active path to obtain professional-level Google certification within a defined period after hire, is preferred
  </li>
  <li>
   Familiarity with core security concepts such as access control, logging and monitoring, vulnerability management, configuration management, encryption, and incident response
  </li>
  <li>
   Strong writing and communication skills with the ability to produce clear, professional, customer-ready documentation with guidance
  </li>
  <li>
   Strong organizational skills, attention to detail, and follow-through across multiple tasks in a fast-moving environment
  </li>
  <li>
   Ability to learn quickly, accept coaching, and work effectively with both technical and non-technical stakeholders
  </li>
 </ul>
 <strong>
  PREFERRED QUALIFICATIONS:
 </strong>
 <ul>
  <li>
   Exposure to cybersecurity internships, academic research, lab work, cloud coursework, or compliance documentation
  </li>
  <li>
   Familiarity with SSPs, POA&amp;Ms, STIGs, Nessus/ACAS, or audit/evidence collection is preferred
   <br/>
  </li>
 </ul>
 <strong>
  OVERALL MATCH:
  <br/>
 </strong>
 We are seeking early-career professionals who have already demonstrated a track record of excellence through academics, military service, internships, research, certifications, or hands-on technical work. The ideal candidate brings discipline, intellectual curiosity, strong writing, and a genuine drive to master cybersecurity, cloud, RMF, and emerging technologies. This is a true entry point into mission-critical defense work, but it is intended for high-potential performers who are ready to learn quickly, execute with rigor, and grow into larger responsibility over time.
 <br/>
 &nbsp;
</div>


DoW Junior Cloud RMF Analyst

Tetrad Digital Integrity LLC

<div>Tetrad Digital Integrity (TDI) is a cybersecurity firm built for high-consequence environments where mission, complexity, and trust intersect. Our single focus has been delivering cyber solutions to effectively manage risk &amp; the business of cyber for 25 years!<br>
<br>
TDI is seeking a Junior Cloud RMF Analyst to support RMF and security execution for a mission-critical cloud-hosted defense system. This is a growth role for an early-career cybersecurity professional who is organized, coachable, mission-focused, and ready to build real-world experience in DoD cloud security and RMF operations. The role is designed for candidates with a solid foundation in cybersecurity, an active clearance, and the discipline to operate in a high-visibility environment where accuracy, follow-through, and customer trust matter.<br>
This is not a passive documentation role, but it is also not a sink-or-swim senior ISSO position. You will work alongside experienced ISSOs, ISSMs, and engineering teams to support the RMF engine room: maintaining artifact quality, tracking POA&amp;Ms, collecting and organizing evidence, supporting Continuous Monitoring, and helping ensure that documentation stays aligned to system reality as the environment evolves. If you are the kind of person who learns quickly, writes clearly, stays organized under pressure, and wants to grow into a cloud-savvy ISSO role supporting consequential national security systems, we want to meet you.<div><br>
<b><i>
This position will require hybrid commute to the DC area.</i></b></div><br>
<b>
RESPONSIBILITIES:</b><ul><li>
Support day-to-day RMF execution across the system lifecycle under the guidance of senior cybersecurity staff.</li><li>
Assist with development and maintenance of RMF artifacts including SSPs, SAR support materials, POA&amp;Ms, control implementation details, evidence mappings, and supporting documentation.</li><li>
Collect, organize, and maintain evidence needed to support assessments, audits, Continuous Monitoring, and authorization activities.</li><li>
Support POA&amp;M management with discipline: track remediation items, owners, due dates, status updates, and closure evidence.</li><li>
Help ensure documentation, evidence, and system reality remain aligned as approved changes occur through normal governance and configuration management processes.</li><li>
Support Continuous Monitoring activities by maintaining artifact freshness, tracking recurring deliverables, and helping prepare metrics and status updates.</li><li>
Review vulnerability scan outputs, STIG findings, and remediation documentation to support compliance tracking and risk reduction efforts.</li><li>
Coordinate with engineering, platform, and DevSecOps teams to gather evidence and confirm implementation details for security controls.</li><li>
Support security documentation and control traceability for cloud-hosted environments, including systems using modern platforms and managed cloud services.</li><li>
Contribute to process improvement efforts that reduce manual compliance work and improve quality, consistency, and audit readiness.</li><li>
Build practical knowledge of DoD RMF, NIST SP 800-53, cloud security concepts, and real-world control implementation in operational environments.</li></ul><b>
QUALIFICATIONS:</b><ul><li>
Active Secret clearance.</li><li>
Bachelor&rsquo;s degree in cybersecurity, information systems, computer science, engineering, or a related field, or equivalent relevant experience.</li><li>
1&ndash;2 years of experience in cybersecurity, cloud security, compliance, risk management, IT operations, or related technical work.</li><li>
Security+ certification.</li><li>
Foundational knowledge of RMF, NIST SP 800-53, FedRAMP, or related cybersecurity/compliance frameworks.</li><li>
Basic familiarity with one or more cloud platforms such as AWS, Azure, or GCP, active path to obtain professional-level Google certification within a defined period after hire, is preferred.</li><li>
Familiarity with core security concepts such as access control, logging and monitoring, vulnerability management, configuration management, encryption, and incident response.</li><li>
Strong writing and communication skills with the ability to produce clear, professional, customer-ready documentation with guidance.</li><li>
Strong organizational skills, attention to detail, and follow-through across multiple tasks in a fast-moving environment.</li><li>
Ability to learn quickly, accept coaching, and work effectively with both technical and non-technical stakeholders.</li></ul><b>
PREFERRED QUALIFICATIONS:</b><ul><li>
Exposure to cybersecurity internships, academic research, lab work, cloud coursework, or compliance documentation.</li><li>
Familiarity with SSPs, POA&amp;Ms, STIGs, Nessus/ACAS, or audit/evidence collection is preferred.</li></ul><br>
<b>
OVERALL MATCH:</b><br>
We are seeking early-career professionals who have already demonstrated a track record of excellence through academics, military service, internships, research, certifications, or hands-on technical work. The ideal candidate brings discipline, intellectual curiosity, strong writing, and a genuine drive to master cybersecurity, cloud, RMF, and emerging technologies. This is a true entry point into mission-critical defense work, but it is intended for high-potential performers who are ready to learn quickly, execute with rigor, and grow into larger responsibility over time.<p><br>
TDI does business with the federal government, which restricts employment to individuals who are either US citizens or lawful permanent residents of the United States.</p>
<p>&ldquo;TDI is an Equal Opportunity Employer. Employment decisions are made based on individual qualifications, merit, and business needs. We do not discriminate in employment opportunities or practices based on race, color, religion, sex, or national origin, in accordance with applicable federal laws.&rdquo;</p>
<p></p><p>suyFgZWHfY</p></div>

Chugach Government Solutions

<div>About Us:
<div>
When you work at Chugach Government Solutions (CGS), you join a proud legacy of supporting missions while sustaining culture.</div><div></div><div><br>
The federal division of Chugach Alaska Corporation, CGS has been supporting critical missions as a government contractor for over 25 years. Our focus is to support facility maintenance, IT/technical services, construction and education. We are proud to have built, and continue to foster, an incredibly talented team spanning across the globe in hundreds of different fields &ndash; each team member proud to serve our country with first-class business services, while also making a difference for our Chugach shareholders.</div><div></div><div><br>
At CGS, empowering employees is a part of our core, and that focus is one of the ways we build and foster high-performing teams. We empower our employees through competitive compensation and benefits package, professional growth opportunities, truthful communication, and more!</div>
Position Location:
<div>
This position will be located onsite in San Diego, California (Point Loma).</div>
Job Overview:
<div>
This position is responsible for ensuring programs&rsquo; adherence to all relevant DoD CS policy, as well as industry CS best practices, to properly protect all sensitive data. As part of the overall Risk Management Framework, the position will support planning, perform testing, assess existing documentation and implementation, and suggest policy improvements to the customer.</div>
Responsibilities:
<div><b>
Essential Job Duties:</b></div><ul><li>
Ensures that appropriate policies, standards, procedures, and automated mechanisms designed to appropriately protect the security of information are documented, implemented, and followed to ensure long-term consistency.</li><li>
Validates that activities and controls enacted to secure information are continually assessed. Evaluates gaps in security and identify solutions to mitigate risk, including business processes, technical controls, or policy improvements.</li><li>
Assists various program teams and other stakeholders in capturing and refining information protection requirements, integrating those requirements into system designs, ensuring program compliance with government requirements, and obtaining an Authority to Operate (ATO).</li><li>
Recommends additional security requirements and safeguards as appropriate.</li><li>
Supports planning and engagement efforts for organizational security evaluations, systems analyses, security architecture reviews, and any other similar tasks.</li><li>
Supports formal testing as required by government accrediting authorities to validate established security requirements.</li><li>
Updates, builds and configures modular security applications for various UCES environments.</li><li>
Performs vulnerability scanning and provides technical support for the Assured Compliance Assessment Solution (ACAS) to the CS Division to ensure confidentiality, integrity, and availability of the network.</li><li>
Prepares System Security Plans, updates Plans of Action and Milestones, reviews system audits, and monitors corrective actions until all actions are closed.</li><li>
Develops security and privacy policies (in conjunction with IT governance and other policy development groups) that embody industry best practices.</li><li>
Ensures timeline for projects or tasks are being met with effective time management.</li><li>
Responsible for effective communication with client and facilitating weekly or bi-weekly meetings as per client requirements.</li><li>
Reads\modifies flowcharts, layouts, diagrams, charts, code comments and clear code to represent software system information.</li><li>
Identifies technology limitations and deficiencies in existing systems and associated processes, procedures, and methods.</li><li>
Documents/submits all configuration items (required deliverables per life cycle phase/event) in a consistent manner in accordance with policy requirements.</li><li>
Drafts comprehensive test plans to assess and validate task or project completion, ensuring alignment with client expectations and industry standards.</li><li>
Tests software systems to evaluate functionality, compatibility, and performance.</li><li>
Documents and updates functional requirements, develop process flows, maintain related directives and policies and development of Standard Operating Procedures (SOPs) to support the training enterprise.</li><li>
Prepares and edits detailed white papers and technical documentation for proposals, providing clear and actionable recommendations for future projects.</li><li>
Creates detailed test reports summarizing findings, identifying potential issues, and providing actionable insights to improve system functionality.</li><li>
Collaborates with cross-functional teams to ensure effective integration and validation of project deliverables.</li><li>
Assists in defining and improving testing methodologies, frameworks, and best practices to enhance overall system quality.</li></ul><div><b>
Key Responsibilities:</b></div><ul><li>
Timely and cost-effective performance of duties.</li><li>
Timely completion and accuracy of all work.</li><li>
 Dealing with coworkers or clients in a multicultural environment in a professional, courteous manner in diverse situations.</li><li>
Adhere to established company safety policies and industrial and office safety practices.</li><li>
Compliance with company and contractual Standard Operating Procedures and Personnel policies and procedures<br>
</li></ul>
Job Requirements:
<div><b>
Mandatory:</b></div><ul><li>
Associate degree in computer science or related field; work experience may substitute for a degree.</li><li>
Three (3) years of experience in Cybersecurity.</li><li>
A DoD 8570-01M IAT Level II Baseline certification (CompTIA Security+ CE, GSEC, SSCP or similar).</li><li>
Utilization of Field-Programmable Gate Arrays (FPGA), and J-Link to program processors.</li><li>
Proven experience with shell scripting and automation.</li><li>
Must have excellent written and oral communication skills.</li><li>
Good interpersonal skills and able to work closely in group environments.</li><li>
Ability to work in a fast-paced environment with minimal supervision.</li><li>
Must have and maintain a DoD Secret Clearance (US Citizenship required).</li><li>
Ability to successfully pass any background checks and/or drug testing required on the contract.</li></ul><div><b>
Preferred:</b></div><ul><li>
Troubleshoot issues with software and coding languages such as C++, C#, HTML, CSS.</li><li>
Experience with security evaluations, risk, and control assessments.</li><li>
Experience performing vulnerability scanning using the DISA ACAS.</li><li>
Working knowledge of embedded systems.</li><li>
Working knowledge of AC/DC electronics.</li><li>
Possess a completion certificate within the Domain such as Linux+, RHEL, C++, or similar certifications.</li><li>
Understanding of the DoD environment, Navy Shipboard systems and familiarity with government agency reviews and audits.</li></ul><div><b>
Working Conditions:</b></div><ul><li>
This position is primarily performed in an office setting using standard office equipment (desk, computer, phone, printer, copier, etc.). Work may require travel.</li></ul><div><b>
Physical Requirements:</b></div><ul><li>
Work requires the ability to operate a computer and work in a standard office environment, effectively communicate information in verbal and written form, read and review information and charts, perform analytical thinking skills, use sound judgement, and travel via vehicle and plane.</li></ul>
Disclosures:
<p><b><i>
Chugach Government Solutions is an Equal Opportunity Employer.</i></b><i> Employment decisions are made without regard to race, color, religion, national or ethnic origin, gender, sexual orientation, gender identity or expression, age, pregnancy, disability, genetic factors, protected veteran status or other characteristics protected by law.</i></p><p><i>
Chugach will provide reasonable accommodations, according to applicable state and federal laws, to all qualified individuals with physical or mental disabilities. In compliance with the ADA Amendments Act (ADAAA), if you have a disability and would like to request an accommodation in order to apply for a position with Chugach Government Solutions or any of its subsidiaries, please email </i><i>ada@chugachgov.com.</i></p><div>
Chugach Government Solutions supports pay transparency and is committed to equitable and competitive compensation practices. Compensation for this role will be determined based on factors including job responsibilities, experience, skills, internal equity, geographic location, and applicable contract requirements. Where required by law, compensation ranges will be provided to candidates during the hiring process.</div></div>

Cybersecurity Engineer II

New Directions Technologies, Inc.

<div><div><div><div>Location:
</div></div><br>
<div><div>China Lake, CA</div>
</div><br>
<div><div>Status:
</div></div><br>
<div><div>Full Time</div>
</div><br>
<div><div>Job Description:
</div></div><br>
<div><div>Job Summary: Daily tasks include but are not limited to:<br>
<br>
Execute and oversee RMF Documentation and Compliance: Review the accuracy and traceability of all A&amp;A documentation within eMASS to support timely system authorization.<br>
<br>
Review documentation to ensure full compliance with cybersecurity policies and standards (DoD, DoW, DoN, and RMF).<br>
<br>
Conduct security control assessments and validations of a system's technical and non-technical security features to mitigate known threats and vulnerabilities effectively. These assessments should comprehensively identify and assess impacts while also taking into account existing risk mitigation strategies.<br>
<br>
Ensure the completion of all necessary RMF products and reporting in accordance with policy and in collaboration with the Security Control Assessor.<br>
<br>
Assist in updating any documentation related to risk assessments (such as Risk Assessment Reports, Plan of Actions &amp; Milestones, etc.) based on the results of assessments.<br>
<br>
Conduct the necessary vulnerability analysis to facilitate the mitigation and determination of residual risk as required.<br>
<br>
Provide support for the continuous monitoring program as needed, especially when System Level Continuous Monitoring results are essential to meet ongoing authorization requirements.<br>
<br>
Assist in contingency planning, testing, and execution as necessary.<br>
<br>
Support the incident response process and actively participate in meetings with the program team, offering updates on project status.<br>
<br>
Applicant should possess a strong understanding of the RMF process, as well as a working knowledge of eMASS, eMASSter, STIG Viewer, SCAP Compliance Checker (SCC), VRAM, and Visio applications.<br>
<br>
Excellent written and verbal communication skills, with an ability to clearly report on technical findings to both technical and non-technical stakeholders.<br>
<br>
Ability to work independently and manage multiple tasks in a fast-paced environment.<br>
Education/Experience:<br>
<br>
Due to the sensitive nature of the work, U.S Citizenship is required.<br>
<br>
Must be able to obtain and/or maintain a Security Clearance for duration of employment.<br>
<br>
Prior experience supporting Navy-specific systems or enterprise networks.<br>
</div>
</div><br>
<div><div>Education and Work Experience Requirements:
</div></div><br>
<div><div>Due to customer requirements, U.S Citizenship is required.<br>
<br>
Must be able to obtain and maintain a DoW Security Clearance for duration of employment.
<br>
<br>
BS - Computer Science or other technical field with a minimum of 4 yrs relevant work experience<br>
or 6 yrs relevant work experience in the planning, implementation, upgrading, and/or monitoring of security measures which make up the protection of corporate or government computer networks.
<br>
<br>
Capable of performing independently.<br>
<br>
IAM Level II certificate or higher (CAP, CASP+CE, CCISO, CISM, CISSP, GSLC, HCISPP) required.<br>
<br>
Salary: For Contract LCAT purposes the expected pay range for this position varies (possible $114,400 to $133,120) but is subject to change with experience and educational levels.
</div></div><br>
<div><div>Security Clearance:
</div></div><br>
<div><div>Secret</div></div></div></div>

IT Analyst (Validator, KTR-26-005)

<div>
 <p>
  About the Role
 </p>
 <p>
  <br/>
 </p>
 <p>
  AlloyX is building a regulated, institution-grade stablecoin ecosystem through AX Coin. We are seeking a Director of Risk to lead the enterprise-wide risk framework, ensuring robust governance, regulatory compliance, capital and liquidity discipline, and effective risk oversight across all business activities.
 </p>
 <p>
  <br/>
 </p>
 <p>
  This is a senior leadership role with direct engagement with the Board, regulators, and executive management.
 </p>
 <p>
  <br/>
 </p>
 <p>
  ⸻
 </p>
 <p>
  <br/>
 </p>
 <p>
  Key Responsibilities
 </p>
 <p>
  &bull;	Own and lead the enterprise-wide risk management framework, including risk appetite, risk limits, and risk governance.
 </p>
 <p>
  &bull;	Establish and oversee prudential risk measures, methodologies, analytics, models, and reporting.
 </p>
 <p>
  &bull;	Ensure strong alignment with regulatory standards (e.g. Basel III&ndash;style principles, capital adequacy, liquidity management, solvency concepts).
 </p>
 <p>
  &bull;	Oversee key risk areas including credit, market, operational, liquidity, capital adequacy, and balance sheet risks.
 </p>
 <p>
  &bull;	Lead stress testing frameworks, scenario analysis, and sensitivity testing.
 </p>
 <p>
  &bull;	Manage asset&ndash;liability management (ALM), portfolio allocation, and reserve risk oversight.
 </p>
 <p>
  &bull;	Oversee valuation practices across different asset classes and reserve instruments.
 </p>
 <p>
  &bull;	Ensure accuracy and integrity of data flows, financial reporting, and risk disclosures.
 </p>
 <p>
  &bull;	Produce and present risk reports for:
 </p>
 <p>
  &bull;	Board and Board Committees
 </p>
 <p>
  &bull;	Regulators and prudential authorities
 </p>
 <p>
  &bull;	Annual reports and public disclosures
 </p>
 <p>
  &bull;	Partner closely with Compliance, Finance, Treasury, and Technology teams.
 </p>
 <p>
  &bull;	Build and lead a high-performing risk function, ensuring the right competencies, tools, and controls are in place.
 </p>
 <p>
  <br/>
 </p>
 <p>
  ⸻
 </p>
 <p>
  <br/>
 </p>
 <p>
  Required Experience &amp; Expertise
 </p>
 <p>
  &bull;	5&ndash;7+ years of experience within a risk management function in financial services, banking, payments, fintech, or regulated digital assets.
 </p>
 <p>
  &bull;	Strong understanding of:
 </p>
 <p>
  &bull;	Enterprise Risk Management (ERM)
 </p>
 <p>
  &bull;	Capital allocation and liquidity management
 </p>
 <p>
  &bull;	Prudential supervision and regulatory expectations
 </p>
 <p>
  &bull;	Risk analytics, models, and reporting
 </p>
 <p>
  &bull;	Hands-on experience dealing with regulators, auditors, and board-level stakeholders.
 </p>
 <p>
  &bull;	Familiarity with portfolio management, ALM, reserve management, and financial risk controls.
 </p>
 <p>
  &bull;	Deep understanding of the competencies and operating model required to manage a modern risk function.
 </p>
 <p>
  <br/>
 </p>
 <p>
  ⸻
 </p>
 <p>
  <br/>
 </p>
 <p>
  Qualifications (One or More Preferred)
 </p>
 <p>
  &bull;	Financial Risk Manager (FRM)
 </p>
 <p>
  &bull;	Professional Risk Manager (PRM)
 </p>
 <p>
  &bull;	Chartered Financial Analyst (CFA)
 </p>
 <p>
  &bull;	Associate in Risk Management (ARM &ndash; The Institutes)
 </p>
 <p>
  &bull;	Professional qualification in Actuarial Sciences
 </p>
 <p>
  &bull;	Other equivalent risk or financial services qualifications
 </p>
 <p>
  <br/>
 </p>
 <p>
  ⸻
 </p>
 <p>
  <br/>
 </p>
 <p>
  Why Join AlloyX / AX Coin
 </p>
 <p>
  &bull;	Lead risk for a regulated, next-generation stablecoin platform
 </p>
 <p>
  &bull;	Work closely with founders, board members, and regulators
 </p>
 <p>
  &bull;	Shape the risk architecture of a high-growth digital financial institution
 </p>
 <p>
  &bull;	Competitive compensation and leadership visibility
 </p>
</div>


Director of Risk

Search 10000+ Risk management framework analyst jobs near you this April. New roles added regularly across leading industries. Apply today.

10000 risk management framework analyst jobs Near Me

IV&V Senior Analyst

IT Support Specialist

DoW Junior Cloud RMF Analyst

DoW Junior Cloud RMF Analyst

Cybersecurity Engineer II

IT Analyst (Validator, KTR-26-005)

Director of Risk