Government and Infrastructure - Service Delivery Center - Cybersecurity - ISSO Analyst

Location:

San Antonio

Other locations:
Primary Location Only

Date:
Oct 2, 2026

Requisition

At EY, we’re all in to shape your future with confidence.

We’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go. Join EY and help to build a better working world.

Government & Infrastructure – Service Delivery Cetner
- Cyber Security, Strategy Risk, Compliance and Resiliency Analyst

From strategy to execution, the Government & Infrastructure (G&I) practice of Ernst & Young provides a full range of consulting and audit services to help our Federal, State, Local and Education clients implement new ideas to help achieve their mission outcomes. We deliver real change and measurable results through our diverse, high-performing teams, quality work at the highest professional standards, operational know-how from across our global organization, and creative and bold ideas that drive innovation.

We enable our government clients to achieve their mission of protecting the nation and serving the people; increasing public safety; improving healthcare for our military, veterans and citizens; delivering essential public services; and helping those in need. EY is ready to help our government build a better working world.

The Service Delivery Center is made up of high-performing, US-based resources who work closely with our experienced professionals to deliver project-based work and managed services to our federal clients. The Service Delivery Center is a core component of the Government & Public Sector practice (GPS). This role is part of our Cybersecurity – Strategy, Risk, Compliance & Resiliency (“SRC&R”) team within our Service Delivery Center.

This team assists our clients with aligning a security management strategy with their business goals by assessing, designing, training, implementing and operating cybersecurity processes and solutions. This function is supported by our strategic alliances with third-party vendors and leveraging cybersecurity frameworks (e.g. NIST CSF, NIST 800-53r5, NIST 800-37r2).

The Analyst supports Information System Security Officer (ISSO) and and Security Control Assessment (SCA) support across the NIST Risk Management Framework (RMF) lifecycle. Working under the direction of senior team members, the Analyst helps maintain authorization documentation, organize and evaluate evidence, prepare systems for assessment, track remediation activities, execute continuous monitoring tasks and keep system records current. This role is designed for an early-career practitioner who wants to build strong, hands‑on federal RMF delivery experience.

• Support RMF delivery for assigned federal information systems by maintaining documentation, tracking actions and helping system owners and government security personnel complete authorization activities.
• Support RMF Prepare activities by maintaining system information, stakeholder lists, asset and component inventories, authorization boundary information, data-flow documentation, interconnections and risk context.
• Assist with information-type identification, NIST SP 800-60 mapping and FIPS 199 security categorization, and document the rationale and supporting information for review.
• Support control baseline selection and tailoring by documenting overlays, scoping decisions, organization-defined parameters, common controls and system-specific responsibilities.
• Draft and update authorization artifacts, including System Security Plans, control implementation statements, inventories, diagrams, assessment-readiness materials and supporting appendices.
• Collect, organize and map…