Senior Cybersecurity Assessment Analyst

Kearney and Company is seeking a Senior Cybersecurity Assessment Analyst to join our growing team! Responsibilities include but not limited to:

• Analyze auditor or assessor requests, identify appropriate documentation in coordination with control owners, and review response for appropriateness and compliance
• Organize, monitor, and follow up on audit requests to provide timely responses
• Communicate delays and risks with management
• Review artifacts and draft FMFIA A-123 Appendix A work papers for supervisor review
• Conduct A-123 walkthroughs, draft client request, communicate findings
• Perform review of Plans of Action and Milestones (POA&Ms) to determine sufficiency to remediate findings
• Perform independent verification and validation (IV&V) of audit finding remediation and clearly document results for management review
• Organize, monitor, and follow up on delayed audit finding remediation
• Exercises intermediate knowledge in the use of technologies/systems
• With supervisor assistance and oversight, prepare for and lead meetings with control owners
• Performs other consulting duties, as needed
• Maintains all continuing Government and non-Government educational requirements, including GAGAS requirements

• Bachelor's degree in Computer Science, Information Systems, or a related field
• Minimum 2 years of experience performing external IT security assessments or audit liaison support for external IT security assessments
• Minimum 1 year of external assessment workpaper writing experience, under CIGIE or GAGAS fieldwork requirements
• 2 years of federal client experience and requisite understanding of key NIST publications
• Ability to be onsite 2 days a week in Alexandria, VA
• Professional communication skills and clear business writing
• Ability to obtain and maintain a U.S. security clearance (requires U.S. citizenship)

• OMB A-123, OIG FISCAM, OIG FISMA assessment experience
• Diligent One, Service Now, ACL or High Bond experience
• Professional certification: CISSP, CISA, Security+, CC, CPA

Exclusively focused on the Government, Kearney & Company provides financial services, including auditing, consulting, and technology services. Our commitment to our employees and clients as well as to dedication and trust, critical values to our Firm, have led to Kearney’s recognition as one of the leading accounting firms in the country. Based on our employees’ feedback, we are also consistently rated a Best Place to Work.

Employment at Kearney means a flexible, collaborative, and open-minded work environment. We hope it is your “first easy decision.” Learn more at  The expected salary range for this position is between $69,000 and $105,000. This range is representative of base pay only and does not include straight time pay for hours worked over 40 per week, company contributions towards paid benefits, and/or bonuses.

Actual compensation (meeting or exceeding the range) will be determined based on specific experience, education, work location, clearance level, and other factors permitted by law. This position is eligible for bonuses (when applicable).

We also offer a competitive benefits package that includes:

• Medical, Dental, Vision, Life, AD&D, and Disability Insurance
• 401(k) Retirement Plan and 529 Education Savings Plan
• Flexible Spending & Health Savings Account
• Accident, Critical Illness, Hospital Indemnity Insurances
• Legal Insurance and Pet Insurance
• Employee Assistance Program, fitness and wellness benefits, and other firm benefits
• Paid holidays, vacation, and sick time

Work location is subject to change based on client requirements. Kearney & Company is an Equal Opportunity Employer and will consider all qualified applicants without regard to race, color, national origin, ethnicity, ancestry, genetic information, religion, sex, gender, gender identity, sexual orientation, marital status, pregnancy, childbirth, any medical condition related to pregnancy or childbirth, age, disability, protected veteran status, relationship or association to a protected veteran, or any other characteristic protected by local, state or federal laws, rules or regulation.  

for more information…