Risk & Compliance Analyst

Core Responsibilities

PingWind is seeking a highly skilled and experienced Risk & Compliance Analyst to join our dynamic team supporting a large Federal Government client. Apply expertise in cybersecurity risk management, compliance, audit, and continuous monitoring to assess organizational risk and ensure alignment with Federal security requirements and policies. The Risk & Compliance Analyst will collaborate with technical teams, program leadership, Government stakeholders, and auditors to strengthen the client's cybersecurity and compliance posture and support effective risk-based decision-making.

Key Responsibilities:

• Conduct cybersecurity risk assessments and compliance reviews to identify gaps and remediation needs.
• Support internal and external audits against applicable Federal requirements and organizational policies.
• Perform risk assessment, mitigation, tracking, and continuous monitoring activities.
• Develop and maintain cybersecurity policies, procedures, and compliance documentation.
• Track and report compliance issues and coordinate corrective actions with technical teams.
• Support VA audit planning, documentation collection, auditor inquiries, and required submissions.
• Analyze findings and develop prioritized remediation recommendations.

Requirements:

• Ability to obtain and maintain required VA background investigation/suitability and system access.
• 7+ years of Information Security Experience, with at least 5 years of risk and compliance experience at a large company or Government agency.
• Experience conducting cybersecurity risk assessments, compliance reviews, and audits.
• Experience developing risk mitigation strategies and supporting continuous monitoring.

Preferred Qualifications:

• VA/Federal cybersecurity compliance experience.
• Experience with RMF, FISMA, NIST, or ATO.
• Audit remediation or POA&M experience.