The ISSO Analyst role at EY is part of the Cybersecurity – Strategy, Risk, Compliance & Resiliency team within the Service Delivery Center. This team focuses on aligning security management strategies with business goals for federal clients. The Analyst will support Information System Security Officer (ISSO) and Security Control Assessment (SCA) activities across the NIST Risk Management Framework (RMF) lifecycle. This position is ideal for early-career practitioners looking to gain hands-on experience in federal RMF delivery.

• Bachelor's degree in cybersecurity, information technology, information systems, computer science, engineering, business or a related field.
• 1-3+ years of experience in cybersecurity, technology risk, compliance or information technology.
• Ability to obtain and maintain a secret level clearance.
• Experience developing or maintaining RMF documentation and supporting assessment readiness.
• Flexibility to travel up to 20%.

• Support RMF delivery for assigned federal information systems by maintaining documentation and tracking actions.
• Assist with information-type identification and document the rationale for review.
• Draft and update authorization artifacts, including System Security Plans and control implementation statements.
• Collect and organize evidence to applicable NIST SP 800-53 controls and assessment objectives.
• Prepare evidence packages and participate in evidence-gathering sessions with system owners and assessors.
• Create and maintain POA&M records, tracking progress and following up on overdue actions.
• Execute continuous monitoring activities and support security impact analyses for proposed system changes.
• Maintain accurate system records and perform first-level quality checks on documentation.

• Ernst & Young (EY) offers a comprehensive and competitive benefits package designed to support the well-being of its employees across various dimensions.