Cybersecurity A&A Risk Analyst

Job not on LinkedIn

🔥 3 minutes ago

🇺🇸 United States – Remote

💵 $110k - $112k / year

⏰ Full Time

🟠 Senior

🔴 Lead

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Cherokee Federal

WebsiteLinkedInAll Job Openings

5001 - 10000 employees

Founded 1969

🏥 Healthcare

📦 Logistics

🏭 Manufacturing

Healthcare • Logistics • Manufacturing

Cherokee Federal is a U. S. federal systems integrator and government contractor that empowers mission success for more than 60 U. S. federal agencies. With a global workforce of over 5,000, it delivers advanced technology (cloud, cybersecurity, data & analytics), health services, intelligence analysis and operational support, logistics and sustainment, mission-critical manufacturing, program and engineering technical services, and dynamic contracting solutions to support federal priorities and national security. Cherokee Federal is part of Cherokee Nation Businesses and focuses on mission-focused, U. S. -made solutions.

📋 Description

• Manage full lifecycle Risk Management Framework (RMF) activities in accordance with NIST SP 800-37 • Develop, review, and maintain SSPs, SAPs, SARs, and POA&Ms • Review and assess FedRAMP authorization packages and updates • Monitor ATO packages in the FedRAMP Secure Repository • Communicate with system owners, ISSOs, Cloud Service Providers, and security stakeholders regarding system changes and compliance • Evaluate and validate NIST SP 800-53 Rev. 5 security controls • Conduct NIST SP 800-30-aligned risk assessments and provide recommendations to Authorizing Officials and senior stakeholders • Support continuous monitoring and ongoing authorization by reviewing vulnerability scans, tracking POA&Ms, and coordinating remediation • Peer review cybersecurity policies, standards, procedures, and implementation guidance • Perform regulatory and policy analysis for federal requirements and agency directives • Conduct gap analyses and recommend remediation strategies • Assist with control overlays, baseline updates, and security control tailoring guidance • Provide subject matter expertise in governance discussions • Support enterprise reporting, risk metrics, and ServiceNow compliance dashboards • Support internal and external reviews, including FISMA reporting • Prepare responses to oversight inquiries and track corrective actions • Perform quality assurance reviews of security documentation • Perform other job-related duties as assigned

🎯 Requirements

• Bachelor’s degree in Cybersecurity, Information Technology, Public Policy, or related discipline (or equivalent experience) • Professional certification(s) such as CISSP, CISM, or CAP • Minimum of 7 years of progressive cybersecurity experience, including at least 4 years supporting federal RMF/A&A efforts • Demonstrated experience implementing the NIST Risk Management Framework • Knowledge of FISMA • Knowledge of the Federal Zero Trust Strategy (OMB M-22-09) • Familiarity with federal cloud security requirements and FedRAMP-authorized environments • Experience supporting Moderate and/or High impact systems • Experience with Microsoft 365 office applications • Ability to engage effectively with technical teams and executive leadership • Active Public Trust clearance or ability to obtain a Public Trust clearance • Must be a US Citizen • Must pass pre-employment qualifications of Cherokee Federal • Prolonged periods of sitting at a desk and working on a computer; may occasionally require standing or moving about the office for extended periods • Preferred: Experience with ServiceNow, CSAM and/or comparable GRC tools • Preferred: Familiarity with Atlassian Confluence and JIRA • Preferred: Experience contributing to enterprise-level cybersecurity policy initiatives • Preferred: Familiarity with federal responsible AI guidance, including Executive Order 13960, OMB M-25-21 and M-25-22 • Preferred: Experience supporting federal research or grant-management systems

🏖️ Benefits

• Up to a 6% 401(k) company match • Paid time off • Medical, dental, and vision insurance • Prescription drug coverage • Basic life and AD&D insurance • Supplemental life insurance options • Short-term and long-term disability coverage • Paid holidays • Employee Assistance Program (EAP) • Flexible Spending Account (FSA) options • Health Savings Account (HSA) options • Professional development, training, and certification support • Voluntary accident, critical illness, and identity theft protection benefits