phia, LLC · 1 day ago

Cyber Risk Management Analyst

Merrifield, VA

Full-time

Remote

Mid Level

3+ years exp

Maximize your interview chances

Cyber SecurityInformation Technology

No H1B

U.S. Citizen Only

Security Clearance Required

Insider Connection @phia, LLC

Discover valuable connections within the company who might provide insights and potential referrals.
Get 3x more responses when you reach out via email instead of LinkedIn.

Responsibilities

Drive the design, development, implementation, and continuous improvement of third-party cyber risk management strategies and practices across public and private sectors.

Implement and adapt industry-standard cybersecurity frameworks (e.g., ISO 27001, NIST CSF, NIST 800-53, NIST 800-171, CIS 18, Zero Trust Principles, FedRAMP).

Conduct supply chain risk assessments using recognized audit reports (e.g., SOC 2 Type II) and questionnaire responses.

Collaborate with cross-functional leadership and stakeholders, particularly in supply chain management, to communicate third-party risk management strategies, activities, and identified risks.

Utilize third-party risk assessment platforms (e.g., Process Unity GRX) and risk management platforms (e.g., Diligent RSAM).

Review and make recommendations for policy and process updates, insuring alignment with organizational risk requirements.

Lead and mentor diverse teams with varying levels of subject matter expertise.

Prioritize and manage multiple concurrent projects to ensure timely completion.

Produce high-quality technical documentation and reports.

Engage in continuous learning to expand personal knowledge and upskill team members.

Qualification

Find out how your skills align with this job's requirements. If anything seems off, you can easily click on the tags to select or unselect skills to reflect your actual expertise.

Cyber Risk ManagementISO 27001NIST CSFNIST 800-53NIST 800-171CIS 18Zero Trust PrinciplesFedRAMPProcess Unity GRXDiligent RSAMSOC 2 Type IICRISCCISSPCCSKCISACISMTechnical WritingTeam Management

Required

3+ years of experience in the security aspects of multiple platforms, operating systems, software, communications, and network protocols.

Familiarity with third-party risk assessment platforms (e.g., Process Unity GRX) and risk management platforms (e.g., Diligent RSAM).

Familiarity with cyber risk assessment and management frameworks, methodologies, and reporting. (e.g., SOC 2 Type II) and questionnaire responses.

Strong understanding and practical experience in adapting and implementing industry-standard cybersecurity frameworks and standards (e.g., ISO 27001, NIST CSF, NIST 800-53, NIST 800-171, CIS 18, Zero Trust Principles, FedRAMP).

Excellent communication skills to effectively engage with cross-functional leadership and stakeholders, particularly in supply chain management regarding third-party risk management strategies and activities.

Experience in managing and instructing diverse teams with varying levels of subject matter expertise.

Strong organizational skills to manage competing priorities and ensure timely completion of projects.

Technical Writing Skills: Proficient in producing high-quality technical documentation and reports.

U.S. Citizenship required

Ability to obtain Public Trust (or higher) government clearance