Cybersecurity Risk Analyst

Kearney & Company is seeking a skilled and vigilant Cybersecurity Risk Analyst to join our dynamic team. The Cybersecurity Risk Analyst is responsible for identifying, assessing, and monitoring risks across the organization. This role helps strengthen the company's security posture by evaluating risk, identifying threats, analyzing vulnerabilities, supporting remediation efforts, and ensuring alignment with security standards, policies, and frameworks.

Primary Responsibilities-

• Identify, assess, and document risks across systems, applications, vendors, and cloud environments.
• Conduct risk assessments and security reviews, including threat analysis, vulnerability analysis, and control evaluations.
• Monitor the evolving threat landscape and provide insights into emerging risks.
• Collect, analyze, and operationalize Open-Source Intelligence (OSINT) to identify emerging threats, adversary activity, and external risk indicators.
• Identify, assess, and investigate potential insider threat risks by analyzing user activity, behavioral indicators, and anomalous patterns across systems and data sources.
• Collect, correlate, and document findings from logs, alerts, OSINT, and case files to support insider threat inquiries and escalation decisions.
• Support the development and enhancement of risk governance processes, policies, and reporting.
• Participate in incident response by evaluating risk impact and supporting post-incident risk reduction activities.
• Maintain risk registers and prepare reports and briefings for leadership, stakeholders, and governance committees.
• Evaluate third-party vendors for cybersecurity and data protection risks.
• Assist in ensuring compliance with frameworks such as NIST, ISO 27001, CIS Controls, SOC 2, and internal security policies.
• Contribute to security awareness efforts by communicating risk drivers, trends, and recommended best practices.
• Montior, organize, and ensure the integrity of digital case files within the case management platform.

Qualifications

• Bachelor's degree from an accredited university or equivalent professional experience from a relevant field.
• Minimum 2.5 years experience in OSINT, cybersecurity, information security, risk management, auditing, or related fields.
• Understanding of cyber threats, vulnerabilities, cloud security, identity and access management, OSINT, and security controls.
• Familiarity with risk frameworks (e.g., NIST CSF, NIST 800-53, ISO 27001, CIS).
• Ability to interpret technical issues and translate them into business-level risk impacts.
• Excellent written and verbal communication skills.
• Strong data visualization, analytical, and documentation skills.
• Ability to obtain and maintain an U.S. security clearance (requires U.S. citizenship)

Preferred Qualifications

• Cybersecurity or OSINT Certifications such as Security+, CySA+, CISA, GOSI, or C|OSINT

Overview

Exclusively focused on the Government, Kearney & Company provides financial services, including auditing, consulting, and technology services. Our commitment to our employees and clients as well as to dedication and trust, critical values to our Firm, have led to Kearney's recognition as one of the leading accounting firms in the country. Based on our employees' feedback, we are also consistently rated a Best Place to Work. Employment at Kearney means a flexible, collaborative, and open-minded work environment. We hope it is your "first easy decision." Learn more at

The expected salary range for this position is between $80,000 and $100,000. This range is representative of base pay only and does not include straight time pay for hours worked over 40 per week, company contributions towards paid benefits, and/or bonuses. Actual compensation (meeting or exceeding the range) will be determined based on specific experience, education, work location, clearance level, and other factors permitted by law. This position is eligible for bonuses (when applicable).


We also offer a competitive benefits package that includes:

• Medical, Dental, Vision, Life, AD&D, and Disability Insurance
• 401(k) Retirement Plan and 529 Education Savings Plan
• Flexible Spending & Health Savings Account
• Accident, Critical Illness, Hospital Indemnity Insurances
• Legal Insurance and Pet Insurance
• Employee Assistance Program, fitness and wellness benefits, and other firm benefits.
• Paid holidays, vacation, and sick time

EEO Notice

Applicants have rights under Federal Employment Laws

EEO Notice

Work location is subject to change based on client requirements.


Kearney & Company is an Equal Opportunity Employer and will consider all qualified applicants without regard to race, color, national origin, ethnicity, ancestry, genetic information, religion, sex, gender, gender identity, sexual orientation, marital status, pregnancy, childbirth, any medical condition related to pregnancy or childbirth, age, disability, protected veteran status, relationship or association to a protected veteran, or any other characteristic protected by local, state or federal laws, rules or regulation. Click here for more information on Kearney's EEO Policy.

If you would like to request a reasonable accommodation, regarding accessibility of our website, a modification or adjustment of the job application or interview process due to a disability, please call View phone number on click.appcast.io or email View email address on click.appcast.io. Please be advised that this contact information is for accommodation requests only and cannot be used to inquire about the status of an application.


Family and Medical Leave Act (FMLA)

FMLA is designed to help employees balance their work and family responsibilities by allowing them to take reasonable unpaid leave for certain family and medical reasons. Kearney & Company provides eligible employees with up to 12 weeks of unpaid, job-protected leave per year. Military family leave is available for up to 26 weeks under FMLA. Click here to learn more.

Employee Polygraph Protection Act (EPPA)

The EPPA prohibits most private employers from using lie detector tests either for pre-employment screening or during the course of employment. Kearney & Company adheres all provisions of the EPPA. Click here to learn more.