Mid-Level Audit/COOP Business Analyst (Cybersecurity)

Location: Washington, DC, United States; hybrid work environment

Salary: USD 140,000–150,000 per year

Company

Chenega Services & Federal Solutions, LLC, a hirify.global company, provides professional services and federal client support.

What you will do

• Support the planning, execution, and reporting of FISMA, OIG, IT, and cybersecurity audits and assessments.
• Evaluate information security controls against FISMA, NIST guidance, FHFA policies, and federal cybersecurity requirements.
• Collect and maintain audit evidence, workpapers, supporting documentation, test procedures, and risk assessments.
• Coordinate with system owners, cybersecurity personnel, business stakeholders, and audit teams during interviews, walkthroughs, control testing, and validation.
• Track findings, recommendations, corrective actions, and POA&Ms through remediation and closure, including status reports, dashboards, and executive summaries.
• Develop and execute disaster recovery tests, manage backup strategies, oversee restoration, and maintain and improve recovery documentation and procedures.

Requirements

• Bachelor’s degree in cybersecurity, information systems, computer science, information technology, accounting, business administration, or a related field.
• Three to five years of experience supporting federal IT audits, cybersecurity assessments, FISMA evaluations, OIG audits, COOP implementations, or related compliance activities.
• Experience with audit documentation, workpapers, evidence, disaster recovery planning, risk assessments, business impact analyses, and recovery testing.
• Strong analytical, organizational, problem-solving, written, and verbal communication skills.
• Proficiency with Microsoft Office Suite, including Excel, Word, PowerPoint, Outlook, and Teams.
• Ability to obtain and maintain a Public Trust clearance and work in a hybrid environment in Washington, DC.

Nice to have

• CISA, CISSP, or CISM certification.
• Experience reviewing SOC reports or using GRC platforms and audit management tools.
• Experience developing executive dashboards, reporting metrics, or supporting cybersecurity continuous monitoring programs.

Culture & Benefits

• Paid time off, vacation accrual, and 11 paid holidays.
• Medical, dental, vision, prescription, life, disability, and employee assistance benefits.
• Flexible spending, health savings, health reimbursement, dependent care, and commuter accounts.
• 401(k)/401(a) retirement plans and voluntary insurance benefits.
• Collaborative environment with management engagement, performance recognition, and promotion opportunities.