Senior Cybersecurity Risk Analyst

Varite, Inc

McLean, VA(remote)

Apply

JOB DETAILS

SALARY

$70–$76.92 Per Hour

SKILLS

Artificial Intelligence (AI), Best Practices, Business Operations, Business-to-Business (B2B), CISSP - Certified Information Systems Security Professional, Cloud Computing, Code Reviews, Communication Skills, CompTIA Security+, Computer Terminals, Construction, Construction Engineering, Consulting, Defense Federal Acquisition Regulations Supplement (DFARS), Documentation Review, Energy Management, Enterprise Architecture, Enterprise Protection, Environmental Management, Fortune 1000 Customers, GNU C Compiler, Government, ISO (International Organization for Standardization), Identity Data Management, Information Technology & Information Systems, International Electro-Technical Commission (IEC), Internet Security, Leadership, Lift/Move 50 Pounds, Logistics, Maintain Compliance, Microsoft Access Database, Microsoft Product Family, Microsoft Windows Azure, NIS (Network Information Service), Operational Audit, Operational Improvement, Operations Processes, Policy Development, Presentation/Verbal Skills, Procedure Development, Professional Services, Project/Program Management, Publications, Regulations, Risk, Risk Analysis, Risk Management, Risk Management Framework (RMF), Security Attacks, Software Engineering, Sustainability, Technical Leadership, Time Management, U.S. National Institute of Standards and Technology (NIST), United States Citizen, Willing to Travel, Work From Home, Writing Skills

LOCATION

McLean, VA(remote)

POSTED

Today

VARITE is looking for qualified Senior Cybersecurity Risk Analyst (Remote)

WHAT THE CLIENT DOES?
A global engineering, construction, and professional services company that provides solutions in areas such as defense, energy, environmental management, and infrastructure. It offers a wide range of services including maintenance, logistics, sustainability, and project management to both government and commercial clients.

WHAT WE DO?
Established in the Year 2000, VARITE is an award-winning minority business enterprise providing global consulting & staffing services to Fortune 1000 companies and government agencies. With 850+ global consultants, VARITE is committed to delivering excellence to its customers by leveraging its global experience and expertise in providing comprehensive scientific, engineering, technical, and non-technical staff augmentation and talent acquisition services.

Job Title: Senior Cybersecurity Risk Analyst
Location: McLean, VA (Remote)
Contract Duration: 2 months
Pay Rate Range: $70.00 - $76.92/hr. on W2
Work Authorization: Only USC
This opportunity is open to extensions and a possibility of temp to hire.

HERE’S WHAT YOU’LL DO
Purpose and Scope:

The Senior Cybersecurity Risk Analyst is a remote, senior individual contributor position within the Cybersecurity Governance, Risk, and Compliance (GR&C) team.
This role owns the enterprise's cyber risk assessment work: evaluating activities and operational decisions across the enterprise and articulating the resulting cyber risk to business leadership against the enterprise's risk appetite.
The work is assessment heavy. The Senior Cybersecurity Risk Analyst examines technology and operational decisions for cyber risk that compliance-driven review alone does not surface, then frames that risk in business terms so GR&C and leaders can make informed accept, mitigate, or remediate decisions.
The role is a twin to the Compliance function: where Compliance concentrates on the administrative work of demonstrating conformance to mandatory controls, this role works alongside it to drive cohesive cyber risk management across the enterprise regardless of which framework imposes a given requirement.
Consistent with the GR&C charter, the role helps protect ** against internal and external cyber threats and helps set, improve, and make recommendations on the enterprise security program based on industry best practices, regulations, policies, standards, and guidelines.
GR&C surfaces and advises on risk so that business and operational owners can make informed decisions. This person must be technical enough to recognize risk in networking, cloud, endpoint, and identity decisions made by engineering and IT, and credible enough that their risk judgments carry weight with those teams and with leadership. The role acts on behalf of the entire enterprise rather than any single team, contract, or project, and brings attention to risk without hindering the business.

Essential Responsibilities:

Conduct cyber risk assessments of activities and operational decisions across the enterprise, identifying risk to the confidentiality, integrity, and availability of enterprise systems and data.
Articulate cyber risk to business and technical leadership in clear, decision-ready terms, framed against the enterprise's risk appetite.
Take lead on cyber risk reviews across a range of assessment types, such as third-party cyber risk assessment, temporary risk acceptance review, and software risk review, and track enterprise artificial intelligence development as it relates to cyber risk.
Work with the Compliance function to ensure that mandatory control interpretations do not leave other cyber risk unaddressed, and that risk treatment is coherent across frameworks.
Evaluate the cyber risk implications of technology decisions, recognizing risk in networking, cloud, endpoint, and identity and access architectures that compliance-only review would not surface.
Articulate when residual cyber risk exceeds the enterprise's appetite and specify the risk reduction required.
Contribute a risk-posture perspective to enterprise scoping and architecture decisions, including the residual risk implications of carved-out certification environments and enclave boundaries.
Improve the operational and procedural aspects of the Cyber GR&C function: assessment methodology, intake, risk articulation standards, evidence handling, and the consistency of risk judgments across the team.
Maintain current knowledge of the cyber risk, threat, technology, and regulatory landscape, and bring that currency into assessments and into the team's collective capability.
Travel up to 25 percent. Perform other position-related duties as assigned.

Minimum Requirements:

Must be a U.S. Citizen.
U.S. Remote-Telework role; must reside within the United States to work remotely.
Minimum of 8 years of hands-on cybersecurity experience, with demonstrated depth in evaluating real technology environments, not solely policy or audit administration.
Demonstrated ability to recognize cyber risk in networking, cloud, and endpoint technologies, and in identity and access management, well enough to assess the decisions of engineering and IT teams independently.
Demonstrated experience in enterprise risk management and in third-party or vendor cyber risk assessment.
Ability to articulate cyber risk to business leadership in decision-ready terms.
Current Security+ or an equivalent industry certification. (Certification establishes the baseline; demonstrated hands-on capability is weighted more heavily than credentials.)
Working knowledge of NIST publications and their relevance to cyber risk and compliance.
Strong written and verbal communication, including the ability to explain technical risk to non-technical stakeholders.
Self-starter able to operate autonomously on ambiguous problems with limited direction.
Ability to travel up to 25 percent.

Preferred and Differentiating Qualifications:

The following raise the ceiling for this role. Hands-on depth in the areas below is valued above the number of certifications or degrees held.
Senior certifications such as CISSP or CySA+, and an identity and access credential such as Microsoft SC-300.
Hands-on experience in a Microsoft Azure environment, including Microsoft 365; exposure to Azure Government (GCC High) is strongly preferred.
Direct experience assessing identity and access architectures, including Entra ID, B2B and external identity, conditional access, and privileged access.
Experience in U.S. Federal or Defense Industrial Base (DIB) environments, and familiarity from a risk perspective with CMMC, NIST SP 800-171/172, and DFARS, and with international frameworks such as UK Cyber Essentials, Australian Essential Eight, UK GDPR, and EU NIS2.
Familiarity with multi-framework risk management across standards such as ISO/IEC 27001 and with crosswalk approaches that achieve cohesive risk treatment across frameworks.
Experience improving GR&C operational processes: assessment methodology, intake, and risk reporting.
Bachelor's degree in a related field.
A degree is not required and does not substitute for demonstrated hands-on capability; equivalent experience is fully acceptable.

Work Environment, Physical Demands, and Mental Demands:

Typical remote office environment with no unusual hazards.
Occasional lifting to 50 pounds, constant sitting while using a computer terminal, constant use of sight while reviewing documents, constant use of speech and hearing for communication, constant mental alertness, planning and organizing skills, and the ability to work under deadlines

BENEFITS:
We offer a comprehensive benefits package designed to support the health, well-being, and financial security of our employees and their families. Eligible employees may receive:

Health Insurance: Medical, dental, and vision coverage
Retirement Plans: Participation in a company-sponsored retirement savings plan.
Legal Service Plans: Offering access to attorneys for legal advice and representation.

If this opportunity interests you, please respond by clicking on EasyApply.

Know someone who would be perfect for this role? Refer to us and if they are hired, you could be eligible for our employee referral bonus! Help us grow our team with top talent from your network.
VARITE is committed to creating a diverse environment and is proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status.

Senior Cybersecurity Risk Analyst

Varite, Inc

McLean, VA(remote)

About the Company

Varite, Inc

Similar Job Searches