Risk & Compliance Analyst

PingWind is seeking a highly skilled and experienced Risk & Compliance Analyst to join our dynamic team supporting a large Federal Government client. Apply expertise in cybersecurity risk management, compliance, audit, and continuous monitoring to assess organizational risk and ensure alignment with Federal security requirements and policies. The Risk & Compliance Analyst will collaborate with technical teams, program leadership, Government stakeholders, and auditors to strengthen the client's cybersecurity and compliance posture and support effective risk-based decision-making.
 
Responsibilities

• Conduct cybersecurity risk assessments and compliance reviews to identify gaps and remediation needs.
• Support internal and external audits against applicable Federal requirements and organizational policies.
• Perform risk, assessment, mitigation, tracking, and continuous monitoring activities.
• Develop and maintain cybersecurity policies, procedures, and compliance documentation.
• Track and report compliance issues and coordinate corrective actions with technical teams.
• Support VA audit planning, documentation collection, auditor inquiries, and required submissions.
• Analyze findings and develop prioritized remediation recommendations.

• Ability to obtain and maintain required VA background investigation/suitability and system access.
• Experience conducting cybersecurity risk assessments, compliance reviews, and audits.
• Experience developing risk mitigation strategies and supporting continuous monitoring.

• VA/Federal cybersecurity compliance experience.
• RMF, FISMA, NIST, or ATO experience.
• Audit remediation or POA&M experience.