Risk & Compliance Analyst
PingWind · United States · 3 wk ago
RemoteRemoteLegalFull-time
We need to output HTML fragment with sections: headings for sections like About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. Only include sections that have real specific content. Remove boilerplate, navigation, EEO, etc. Also remove duplicated lines. Keep all substantive info.
We need to parse the posting.
Let's extract:
Location: Remote; travel may be required in support of meetings, training, presentations, or briefings with project stakeholders
Required Clearance: Ability to obtain and maintain the required VA background investigation/suitability determination
Certifications: Certification in one or more of the following: IAT III, IAM III or IASAE III certifications. IAT III/ IAM III / IASAE III certifications may be substituted for a relevant Bachelor’s degree or 4 years of relevant experience
Required Education: Bachelor’s degree in Business Administration, Business Management, Cybersecurity, Computer Science, Information Systems, Information Assurance, Information Security, Information identification Resource Management, or related fields. (Note: "Information identification Resource Management" seems a typo; keep as is.)
Required Experience: Minimum of 7 years of Information Security Experience of which at least 5 years are of risk and compliance experience at a large company or Government agency similar in size/scope to GSA, IRS, DoD or VA. An advanced degree (e.g. Master’s or PhD) in related field may substitute for up to 2 years of the required experience. Expertise handling and reporting compliance issues and coordinating with regulatory bodies.
Description: PingWind is seeking a highly skilled and experienced Risk & Compliance Analyst to join our dynamic team supporting a large Federal Government client. Apply expertise in cybersecurity risk management, compliance, audit, and continuous monitoring to assess organizational risk and ensure alignment with Federal security requirements and policies. The Risk & Compliance Analyst will collaborate with technical teams, program leadership, Government stakeholders, and auditors to strengthen the client's cybersecurity and compliance posture and support effective risk-based decision-making.
Responsibilities: list bullet points:
- Conduct cybersecurity risk assessments and compliance reviews to identify gaps and remediation needs
- Support internal and external audits against applicable Federal requirements and organizational policies
- Perform risk, assessment, mitigation, tracking, and continuous monitoring activities
- Develop and maintain cybersecurity policies, procedures, and compliance documentation
- Track and report compliance issues and coordinate corrective actions with technical teams
- Support VA audit planning, documentation collection, auditor inquiries, and required submissions
- Analyze findings and develop prioritized remediation recommendations
Requirements: bullet points? Actually they list:
- Ability to obtain and maintain required VA background investigation/suitability and system access
- Experience conducting cybersecurity risk assessments, compliance reviews, and audits
- Experience developing risk mitigation strategies and supporting continuous monitoring
Preferred Qualifications: bullet points:
- VA/Federal cybersecurity compliance experience
- RMF, FISMA, NIST, or ATO experience
- Audit remediation or POA&M experience
About PingWind: paragraph.
Our benefits include: list bullet points:
- Eleven Federal Holidays
- Paid Time Off accrued each pay period
- Parental Leave
- Three medical plan choices with generous employer contribution
- Dental and Vision Insurance
- Company paid Short-Term and Long-Term Disability
- Company paid Life and AD&D Insurance
- 401k with competitive matching and vesting schedule
- Continuing education assistance
- Short Term / Long Term Disability & Life Insurance (duplicate? Actually already listed; but we keep as is maybe)
- Medical, Dependent Care and Commuter Flexible Spending Accounts
- Employee Assistance Program
- Wellness benefits include Calm Health app and WellHub gym subsidy (formerly GymPass)
- 529 College Savings Plan
- Legal Insurance
- Pet Insurance
- Veterans are encouraged to apply
Salary Range: 77K - 107K. Also note: "The pay range for this job is a general guideline only and not a guarantee of compensation or salary. Additional factors considered..." We need to include Pay section only if posting actually states them. It does state salary range. So we can include Pay section with that range and maybe note it's guideline. But we should not include filler like "commensurate with experience". The text includes a disclaimer; we can include it as part of Pay section? The instruction: "Prefer a few substantive sections over many thin ones." We can include Pay section with the range and maybe the note. It's substantive.
Schedule: Not mentioned; location remote, travel may be required. No explicit schedule (full-time, part-time). Not given, so we should not create Schedule section.
Skills: Not explicitly listed; maybe we could infer but we should not invent. So omit Skills.
Qualifications: Could combine Requirements and Preferred Qualifications? The instruction: use headings for sections like Qualifications, Skills, etc. We have Requirements and Preferred Qualifications. Could we put Requirements under "Requirements" heading and Preferred Qualifications under "Qualifications"? Or we could have "Requirements" and "Preferred Qualifications". The instruction says use headings for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule). So we can have Requirements and Qualifications separate. We'll put Requirements as the mandatory requirements, and Qualifications as preferred qualifications.
About the role: we have Description paragraph that describes role. Could be "About the role". We'll put that.
Also we have About PingWind paragraph; maybe that could be "About the company" but not in list. Could we include as part of About the role? Probably not; but we could include as a separate section like "About PingWind". Not in allowed headings list but we could still use
for sections like About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. Only include sections that have real specific content. Remove boilerplate, navigation, EEO, etc. Also remove duplicated lines. Keep all substantive info.
We need to parse the posting.
Let's extract:
Location: Remote; travel may be required in support of meetings, training, presentations, or briefings with project stakeholders
Required Clearance: Ability to obtain and maintain the required VA background investigation/suitability determination
Certifications: Certification in one or more of the following: IAT III, IAM III or IASAE III certifications. IAT III/ IAM III / IASAE III certifications may be substituted for a relevant Bachelor’s degree or 4 years of relevant experience
Required Education: Bachelor’s degree in Business Administration, Business Management, Cybersecurity, Computer Science, Information Systems, Information Assurance, Information Security, Information identification Resource Management, or related fields. (Note: "Information identification Resource Management" seems a typo; keep as is.)
Required Experience: Minimum of 7 years of Information Security Experience of which at least 5 years are of risk and compliance experience at a large company or Government agency similar in size/scope to GSA, IRS, DoD or VA. An advanced degree (e.g. Master’s or PhD) in related field may substitute for up to 2 years of the required experience. Expertise handling and reporting compliance issues and coordinating with regulatory bodies.
Description: PingWind is seeking a highly skilled and experienced Risk & Compliance Analyst to join our dynamic team supporting a large Federal Government client. Apply expertise in cybersecurity risk management, compliance, audit, and continuous monitoring to assess organizational risk and ensure alignment with Federal security requirements and policies. The Risk & Compliance Analyst will collaborate with technical teams, program leadership, Government stakeholders, and auditors to strengthen the client's cybersecurity and compliance posture and support effective risk-based decision-making.
Responsibilities: list bullet points:
- Conduct cybersecurity risk assessments and compliance reviews to identify gaps and remediation needs
- Support internal and external audits against applicable Federal requirements and organizational policies
- Perform risk, assessment, mitigation, tracking, and continuous monitoring activities
- Develop and maintain cybersecurity policies, procedures, and compliance documentation
- Track and report compliance issues and coordinate corrective actions with technical teams
- Support VA audit planning, documentation collection, auditor inquiries, and required submissions
- Analyze findings and develop prioritized remediation recommendations
Requirements: bullet points? Actually they list:
- Ability to obtain and maintain required VA background investigation/suitability and system access
- Experience conducting cybersecurity risk assessments, compliance reviews, and audits
- Experience developing risk mitigation strategies and supporting continuous monitoring
Preferred Qualifications: bullet points:
- VA/Federal cybersecurity compliance experience
- RMF, FISMA, NIST, or ATO experience
- Audit remediation or POA&M experience
About PingWind: paragraph.
Our benefits include: list bullet points:
- Eleven Federal Holidays
- Paid Time Off accrued each pay period
- Parental Leave
- Three medical plan choices with generous employer contribution
- Dental and Vision Insurance
- Company paid Short-Term and Long-Term Disability
- Company paid Life and AD&D Insurance
- 401k with competitive matching and vesting schedule
- Continuing education assistance
- Short Term / Long Term Disability & Life Insurance (duplicate? Actually already listed; but we keep as is maybe)
- Medical, Dependent Care and Commuter Flexible Spending Accounts
- Employee Assistance Program
- Wellness benefits include Calm Health app and WellHub gym subsidy (formerly GymPass)
- 529 College Savings Plan
- Legal Insurance
- Pet Insurance
- Veterans are encouraged to apply
Salary Range: 77K - 107K. Also note: "The pay range for this job is a general guideline only and not a guarantee of compensation or salary. Additional factors considered..." We need to include Pay section only if posting actually states them. It does state salary range. So we can include Pay section with that range and maybe note it's guideline. But we should not include filler like "commensurate with experience". The text includes a disclaimer; we can include it as part of Pay section? The instruction: "Prefer a few substantive sections over many thin ones." We can include Pay section with the range and maybe the note. It's substantive.
Schedule: Not mentioned; location remote, travel may be required. No explicit schedule (full-time, part-time). Not given, so we should not create Schedule section.
Skills: Not explicitly listed; maybe we could infer but we should not invent. So omit Skills.
Qualifications: Could combine Requirements and Preferred Qualifications? The instruction: use headings for sections like Qualifications, Skills, etc. We have Requirements and Preferred Qualifications. Could we put Requirements under "Requirements" heading and Preferred Qualifications under "Qualifications"? Or we could have "Requirements" and "Preferred Qualifications". The instruction says use headings for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule). So we can have Requirements and Qualifications separate. We'll put Requirements as the mandatory requirements, and Qualifications as preferred qualifications.
About the role: we have Description paragraph that describes role. Could be "About the role". We'll put that.
Also we have About PingWind paragraph; maybe that could be "About the company" but not in list. Could we include as part of About the role? Probably not; but we could include as a separate section like "About PingWind". Not in allowed headings list but we could still use for any section heading? The instruction: "use for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule)." It gives examples but not exclusive. Likely we should stick to those headings. About PingWind could be considered "About the role"? Not exactly. Might be better to incorporate into Description or omit? The instruction says preserve ALL substantive information; do not invent or summarize away detail. So we need to keep About PingWind info. Where to put? Could be under "About the role" as a subsection? But we cannot add extra headings not in list? The examples are not exhaustive; we can use other headings if needed, but better to follow examples. However we need to preserve the About PingWind info. Could we put it under "About the role" as a paragraph? That would be mixing role description with company info; still preserves info. Probably acceptable.
Alternatively we could add a heading "About PingWind" as . The instruction didn't forbid other headings, just gave examples. It says "use for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule)." So we can use other headings as long as they are . I'd include About PingWind as its own heading.
Now we need to remove boilerplate: cookie/navigation/legal/EEO/equal-opportunity/scam-warning boilerplate, duplicated lines, and application instructions. At end there is EEO statement, AI tools statement, etc. Remove those.
Also remove duplicated lines: e.g., "Company paid Short-Term and Long-Term Disability" appears twice? Actually listed once in benefits and again later "Short Term / Long Term Disability & Life Insurance". Might be duplicate; we should deduplicate.
We need to output only HTML fragment.
Let's craft sections:
About the role
for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule)." It gives examples but not exclusive. Likely we should stick to those headings. About PingWind could be considered "About the role"? Not exactly. Might be better to incorporate into Description or omit? The instruction says preserve ALL substantive information; do not invent or summarize away detail. So we need to keep About PingWind info. Where to put? Could be under "About the role" as a subsection? But we cannot add extra headings not in list? The examples are not exhaustive; we can use other headings if needed, but better to follow examples. However we need to preserve the About PingWind info. Could we put it under "About the role" as a paragraph? That would be mixing role description with company info; still preserves info. Probably acceptable.
Alternatively we could add a heading "About PingWind" as . The instruction didn't forbid other headings, just gave examples. It says "use for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule)." So we can use other headings as long as they are . I'd include About PingWind as its own heading.
Now we need to remove boilerplate: cookie/navigation/legal/EEO/equal-opportunity/scam-warning boilerplate, duplicated lines, and application instructions. At end there is EEO statement, AI tools statement, etc. Remove those.
Also remove duplicated lines: e.g., "Company paid Short-Term and Long-Term Disability" appears twice? Actually listed once in benefits and again later "Short Term / Long Term Disability & Life Insurance". Might be duplicate; we should deduplicate.
We need to output only HTML fragment.
Let's craft sections:
About the role
for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule)." So we can use other headings as long as they are . I'd include About PingWind as its own heading.
Now we need to remove boilerplate: cookie/navigation/legal/EEO/equal-opportunity/scam-warning boilerplate, duplicated lines, and application instructions. At end there is EEO statement, AI tools statement, etc. Remove those.
Also remove duplicated lines: e.g., "Company paid Short-Term and Long-Term Disability" appears twice? Actually listed once in benefits and again later "Short Term / Long Term Disability & Life Insurance". Might be duplicate; we should deduplicate.
We need to output only HTML fragment.
Let's craft sections:
About the role
About the role
PingWind is seeking a highly skilled and experienced Risk & Compliance Analyst to join our dynamic team supporting a large Federal Government client. Apply expertise in cybersecurity risk management, compliance, audit, and continuous monitoring to assess organizational risk and ensure alignment with Federal security requirements and policies. The Risk & Compliance Analyst will collaborate with technical teams, program leadership, Government stakeholders, and auditors to strengthen the client's cybersecurity and compliance posture and support effective risk-based decision-making.
About PingWind
PingWind is focused on delivering outstanding services to the federal government. We have extensive experience in the fields of cybersecurity, development, IT infrastructure, supply chain management and other professional services such as system design and continuous improvement. PingWind is an SBA certified Service-Disabled Veteran-Owned Small Business (SDVOSB) with offices in Northern Virginia and Huntsville AL. www.PingWind.com
Responsibilities
- Conduct cybersecurity risk assessments and compliance reviews to identify gaps and remediation needs
- Support internal and external audits against applicable Federal requirements and organizational policies
- Perform risk, assessment, mitigation, tracking, and continuous monitoring activities
- Develop and maintain cybersecurity policies, procedures, and compliance documentation
- Track and report compliance issues and coordinate corrective actions with technical teams
- Support VA audit planning, documentation collection, auditor inquiries, and required submissions
- Analyze findings and develop prioritized remediation recommendations
Requirements
- Ability to obtain and maintain required VA background investigation/suitability and system access
- Experience conducting cybersecurity risk assessments, compliance reviews, and audits
- Experience developing risk mitigation strategies and supporting continuous monitoring
Qualifications
- VA/Federal cybersecurity compliance experience
- RMF, FISMA, NIST, or ATO experience
- Audit remediation or POA&M experience