Risk and Compliance Analyst

Contingent Upon Contract Award

Remote with occasional on-site support

Connected Logistics is seeking a senior Risk and Compliance Analyst to support cybersecurity governance, enterprise risk management, compliance oversight, audit readiness, and continuous monitoring activities supporting the VA COSE mission. This individual serves as a trusted advisor to Government stakeholders and provides expert guidance on cybersecurity compliance, risk mitigation, security control effectiveness, and regulatory alignment across enterprise initiatives.

Key Responsibilities

• Lead cybersecurity risk and compliance initiatives across enterprise technology environments.
• Conduct risk assessments, compliance reviews, and security control evaluations.
• Support RMF, FISMA, NIST, FedRAMP, and VA cybersecurity requirements.
• Develop risk analyses, compliance reports, executive briefings, and remediation strategies.
• Coordinate internal and external audit activities.
• Support vulnerability management, POA&M tracking, and risk mitigation planning.
• Assist in development and maintenance of cybersecurity policies, standards, and procedures.
• Support Cyber Supply Chain Risk Management (C-SCRM) initiatives and continuous monitoring activities.

• Successful candidates must be eligible to meet VA Tier 4/High Risk background investigation requirements.
• Minimum 7 years of Information Security experience.
• Minimum 5 years of risk, compliance, audit, governance, or related cybersecurity experience.
• Experience supporting large Federal agencies or enterprises comparable to VA, DoD, IRS, or GSA.
• Experience implementing and managing enterprise risk management and compliance programs.
• Bachelor's degree in Business Administration, Business Management, Cybersecurity, Computer Science, Information Systems, Information Assurance, Information Security, Information Resource Management, or related discipline.
• IAT III, IAM III, or IASAE III certification may substitute for a relevant bachelor's degree or four (4) years of relevant experience.
• One or more certification: IAT Level III, IAM Level II, IASAE Level III.

Desired Qualifications

• Experience with Azure, AWS, or FedRAMP cloud environments.
• Experience with Infrastructure-as-Code and Policy-as-Code.
• Experience supporting RMF, FedRAMP, ATO, and Zero Trust initiatives.
• Experience with container orchestration, automation platforms, and enterprise cybersecurity tooling.

Total Rewards Statement

We believe in fairness and clarity throughout our hiring process. The anticipated salary range for this position is $95,000.00-$105,000.00 USD. This is a good-faith range based on factors such as your experience, geographic location, and any applicable contractual requirements, and may vary slightly.

Beyond salary, we provide a robust benefits package and encourage ongoing professional development, because your growth and well-being matter to us. We're excited to support you in building a rewarding career with us!

Connected Logistics respects the need for confidentiality for all applicants.

Connected Logistics has been named a 2026 WTOP Top Workplace in the medium sized business category. Our mission is clear: we deliver mission-focused IT, cybersecurity, logistics, and enterprise modernization support to federal agencies. When we invest in our people and create an environment where they feel valued and empowered, we deliver stronger outcomes for our clients and the missions we support.

Connected Logistics offers an excellent benefits package that includes health, dental, vision, life, and disability insurance, a great 401(k) package, and generous Paid Time Off.

EOE/Disability/Veterans