The ISSO Senior Analyst role at EY focuses on providing Information System Security Officer support and Security Control Assessment across the NIST Risk Management Framework lifecycle. The position is part of the Cybersecurity – Strategy, Risk, Compliance & Resiliency team within the Service Delivery Center, which delivers project-based work and managed services to federal clients. The analyst will work closely with system owners and government ISSMs to maintain security posture documentation and support the authorization lifecycle. This role requires strong analytical skills and the ability to manage multiple workstreams effectively.

• Bachelor's degree in cybersecurity, information technology, information systems, computer science, engineering, business or a related field.
• A minimum of 3 years of related work experience in cybersecurity, technology risk, compliance or information technology.
• Ability to obtain and maintain a secret level clearance.
• Experience developing or maintaining RMF documentation and executing continuous monitoring activities.

• Own RMF delivery workstream for assigned systems by maintaining security posture documentation.
• Develop and maintain core authorization artifacts, including System Security Plans and Security Assessment Reports.
• Analyze information types and impact analysis, including FIPS 199 categorization and risk context.
• Manage POA&M execution for assigned systems, including remediation tracking and evidence validation.
• Facilitate evidence-gathering sessions and control interviews with system owners and application teams.
• Provide day-to-day coaching to Analysts on assessment procedures and documentation standards.

• Ernst & Young (EY) offers a comprehensive and competitive benefits package designed to support the well-being of its employees across various dimensions.