Risk and Compliance Analyst

About the role

Connected Logistics is seeking a senior Risk and Compliance Analyst to support cybersecurity governance, enterprise risk management, compliance oversight, audit readiness, and continuous monitoring activities supporting the VA COSE mission. This individual serves as a trusted advisor to Government stakeholders and provides expert guidance on cybersecurity compliance, risk mitigation, security control effectiveness, and regulatory alignment across enterprise initiatives. The position is remote with occasional on-site support.

Responsibilities

• Lead cybersecurity risk and compliance initiatives across enterprise technology environments.
• Conduct risk assessments, compliance reviews, and security control evaluations.
• Support RMF, FISMA, NIST, FedRAMP, and VA cybersecurity requirements.
• Develop risk analyses, compliance reports, executive briefings, and remediation strategies.
• Coordinate internal and external audit activities.
• Support vulnerability management, POA&M tracking, and risk mitigation planning.
• Assist in development and maintenance of cybersecurity policies, standards, and procedures.
• Support Cyber Supply Chain Risk Management (C-SCRM) initiatives and continuous monitoring activities.

Requirements

• Eligible to meet VA Tier 4/High Risk background investigation requirements.
• Minimum 7 years of Information Security experience.
• Minimum 5 years of risk, compliance, audit, governance, or related cybersecurity experience.
• Experience supporting large Federal agencies or enterprises comparable to VA, DoD, IRS, or GSA.
• Experience implementing and managing enterprise risk management and compliance programs.
• Bachelor's degree in Business Administration, Business Management, Cybersecurity, Computer Science, Information Systems, Information Assurance, Information Security, Information Resource Management, or related discipline.
• IAT III, IAM III, or IASAE III certification may substitute for a relevant bachelor's degree or four (4) years of relevant experience.
• One or more certification: IAT Level III, IAM Level II, IASAE Level III.

Qualifications

• Experience with Azure, AWS, or FedRAMP cloud environments.
• Experience with Infrastructure-as-Code and Policy-as-Code.
• Experience supporting RMF, FedRAMP, ATO, and Zero Trust initiatives.
• Experience with container orchestration, automation platforms, and enterprise cybersecurity tooling.

Benefits

• Health, dental, vision, life, and disability insurance.
• Great 401(k) package.
• Generous Paid Time Off.

Pay

The anticipated salary range for this position is $95,000.00‑$105,000.00 USD.