Apply on Employer Site

Computer World Services Corp. (CWS) · 1 month ago

Intermediate Cyber Risk Assessment Analyst

Fort Meade, MD

Full-time

Hybrid

Mid Level

$80K/yr - $95K/yr

Computer World Services Corp. (CWS) provides technical and analytical support in cybersecurity. The Cyber Risk Assessment Analyst – Intermediate role focuses on standardization and risk management tasks, ensuring cybersecurity baselines and contributing to risk analysis and reporting functions.

ComputerInformation TechnologySoftwareVirtual Reality

Senior Management

No H1B

Security Clearance Required

U.S. Citizen Only

Responsibilities

Assist in drafting/maintaining cybersecurity baseline documents including CSSP, CONOPS, PPP, SOPs, and IRPs

Evaluate newly released IAVMs, STIGs, and SRGs for applicability and support preparation of waiver requests when fixes cannot be implemented within required timelines

Support development of POA&Ms, ensure submission within 30 days, and update bi-monthly status reports

Contribute to the preparation of accreditation packages, due 70–90 days prior to ATO expiration, and ensure all FISMA requirements are met

Provide input to FISMA reports, CMRS Risk Status Reports, and ACAS scan results for reporting to the Government ISSM

Participate in CCRI, SAV, A&A, and self-assessments, providing documentation/analysis in support of inspections

Qualification

Cybersecurity standardizationRisk managementFISMA complianceDoD 8570 IAT Level IICompTIA Security+ CEAuditingDecision Support SystemCommand Cyber Readiness InspectionSite Assistance VisitCyber Self-AssessmentsAdversary AssessmentCooperative VulnerabilityPenetration Assessment

Required

Bachelor's degree or equivalent experience required

Command Cyber Readiness Inspection (CCRI)

Site Assistance Visit (SAV)/ Assessment and Authorization (A&A)

Cyber Self-Assessments

Assist in the preparation of CVPA (Cooperative Vulnerability and Penetration Assessment)

AA (Adversary Assessment)

DISA Risk Management Executive (RME)

Decision Support System (DSS)

Auditing and reporting of systems, networks, documentation, RMF controls, DoD 8140.03 requirements, IAVMs, STIGs and DISA Task Order (DTO) and CYBERCOM Task Order (CTO)

DoD 8570 IAT Level II / 8140 Compliance Required after fully in place

CompTIA Security+ CE

TS/SCI