Cybersecurity Risk Analyst

Role Overview The Cybersecurity Risk Analyst is a member of Draper’s Cybersecurity Risk Management team, responsible for unclassified information system risk and compliance efforts. This role contributes to the Cybersecurity Risk Management team in applying contractual and regulatory requirements to include DFARS and CMMC to Draper’s unclassified computing environments. What You Will Do Serve as a subject matter expert for cybersecurity risk management and compliance frameworks Lead CMMC compliance and certification efforts Provide technical risk guidance on cloud security and hybrid infrastructures Conduct continuous monitoring of security controls Why It Might Be a Fit This role requires a strong working knowledge of NIST SP 800‑171, NIST SP 800‑53, CMMC, NIST Risk Management Framework (RMF), and the ability to develop organizational cybersecurity policy, procedures, standards, and guidelines. Requirements Bachelor’s degree in Information Systems, Cybersecurity, or related field (or equivalent experience) 4 years of cybersecurity and IT experience, including compliance, risk management, and assessment roles Ability to obtain a Secret clearance is required Benefits workplace flexibilityemployee clubshealth and finance workshopsoff site social eventsdiscounts to local museums and cultural activities #J-18808-Ljbffr Draper