Cybersecurity Risk Analyst (GRC / ServiceNow IRM)

Thank you for considering IT Concepts dba Kentro, where innovation drives opportunity and collaboration leads to success. Our dynamic community of experts is fully committed to advancing our customers' missions, fostering professional growth, and making a positive impact on our communities.                                                

By joining our supportive community, you will find that Kentro is dedicated to your personal and professional development. Together, we can drive meaningful change, spark innovation, and achieve extraordinary milestones.

Kentro is seeking a Cybersecurity Risk Analyst to provide day-to-day operational support to the Agency’s Cybersecurity Risk Management (CSRM) Program. This role supports governance operations, maintains the enterprise cybersecurity risk register, and ensures CSRM program documentation remains current, accurate, and aligned with federal risk management requirements. 

The position works closely with federal CSRM Program staff and supports cybersecurity-wide efforts to identify, manage, and mitigate enterprise cyber risks. 

Responsibilities:

Cybersecurity Risk Register Management: 

• Maintain the Cybersecurity Risk Register within ServiceNow Integrated Risk Management (IRM), including: 

• Creation and updates of risk statements and issues 

• Risk assessments and data quality reviews 

• Risk remediation tracking and monitoring 

• Maintenance of process flows and reports using out-of-the-box (OOTB) IRM capabilities 

• Support daily updates and ongoing accuracy of cybersecurity risk data. 

CSRM Governance Administrative Support:

• Support the operations of CSRM governance bodies, including: 

• Security Review Board (SRB) 

• Cybersecurity governance committees (current and future) 

• Develop and maintain governance artifacts, including: 

• Charters (annual reviews and updates) 

• Standard Operating Procedures (SOPs) 

• Meeting agendas, read-ahead materials, and detailed meeting notes 

• Governance membership lists 

• Maintain collaboration sites in Microsoft Teams and other collaboration platforms as required. 

CSRM Program Documentation Maintenance: 

• Review and update CSRM Program documentation at least annually and as needed, including: 

• Cyber Risk Management Strategy 

• Concept of Operations (ConOps) 

• SOPs 

• Governance charters 

• Program briefs, presentations, and reports 

• Confluence site content 

Location: Hybrid in Woodlawn, MD

Salary Range: $155,000-165,000/annually. Factors influencing pay within this range include geography, market demand, skills, education, experience, and other qualifications of the successful candidate.

Requirements

• Bachelor’s and 10 years of experience 

• Knowledge of cybersecurity risk management principles. 

• Experience supporting governance, documentation, and program operations. 

• Strong analytical, documentation, and organizational skills. 

• Ability to manage multiple deliverables and recurring reporting deadlines. 

Preferred Qualifications: 

• Experience with ServiceNow IRM or similar GRC platforms. 

• Familiarity with federal cybersecurity programs and governance structures. 

• Experience supporting enterprise risk management initiatives. 

Clearance Requirement:

• Must be able to obtain and maintain Public Trust Clearance
• Must be a US Citizen

Benefits

The Company

We believe in generating success collaboratively, enabling long-term mission success, and building trust for the next challenge. With you as our partner, let’s solve challenges, think innovatively, and maximize impact. As a valued member of our team, you have the unique opportunity to work in a diverse range of technology and business career paths, all while supporting our nation and delivering innovative technology solutions. We are a close community of experts that pride ourselves on creating an environment defined by teamwork, dedication, and excellence.

We hold three ISO certifications (27001:2013, 20000-1:2011, 9001:2015), two CMMI ML 3 ratings (DEV and SVC) and CMMC Level 2 Certification.

Industry Recognition

Growth | Inc 5000’s Fastest Growing Private Companies, DC Metro List Fastest Growing; Washington Business Journal: Fastest Growing Companies, Top Performing Small Technology Companies in Greater D.C.

Culture | Nor