Cybersecurity Policy Analyst

Job Title: Cybersecurity Policy Analyst Job Code: Location: remote Reports to: Program Manager FLSA Status: Exempt Supervisory: No supervisory/management authority Prepared Date: 10/9/2026 A government contract requires that this position be restricted to U.S. citizens or legal permanent residents. You must provide documentation that you are a U.S. citizen or legal permanent resident to qualify. This position requires an active Public Trust clearance or the ability to obtain a Public Trust clearance to be considered. Position Summary: Cherokee Federal is seeking a Cybersecurity Policy Analyst to support the U.S. National Science Foundation (NSF) Office of the Chief Information Officer (OCIO) as a member of its Oversight and Compliance Team. This position supports the development and maintenance of cybersecurity policy in alignment with federal requirements. The Cybersecurity Analyst will work as part of a small team of analysts under the direction of the Cybersecurity Oversight and Compliance Lead. The role focuses on researching requirements, drafting policy content, and supporting governance and compliance activities, while collaborating closely with stakeholders across the organization. This is a full-time remote position supporting Cherokee Federal's cybersecurity contract with the U.S. National Science Foundation in Alexandria, VA. This position reports to the Cybersecurity Oversight and Compliance Lead, operates within a structured federal compliance environment, and requires collaboration with other IT teams, security personnel, program offices, and senior stakeholders. The role supports governance, risk, and compliance activities to maintain a strong cybersecurity posture across systems. Compensation & Benefits: Starting Salary Range for Cybersecurity Policy Analyst: $115,000 - $120,000 Benefits That Set Us Apart When considering your next opportunity, compensation is only part of the picture. We offer a benefits package designed to invest in your future and support your life outside of work. Highlights include:

• Up to a 6% 401(k) company match to help you build long-term financial security
• Paid time off as part of our comprehensive benefits package, so you have the flexibility to rest, recharge, and enjoy what matters most
• Medical, dental, and vision insurance, plus prescription drug coverage
• Basic life and AD&D insurance, with supplemental life options
• Short-term and long-term disability coverage
• Paid holidays
• Employee Assistance Program (EAP)
• Flexible Spending Account (FSA) and Health Savings Account (HSA) options
• Professional development, training, and certification support
• Voluntary benefits including accident, critical illness, and identity theft protection

Because taking care of our employees isn't just a promise, it's part of who we are. Benefits are subject to change and eligibility requirements apply. Essential Functions, Duties & Responsibilities: Includes the following:

• Support the development, revision, dissemination, and maintenance of NSF cybersecurity policies, standards, procedures, information system authorization packages, and reports in alignment with federal requirements (e.g., FISMA, OMB guidance).
• Research and interpret federal cybersecurity guidance (e.g., NIST publications, CISA directives) and assist in translating requirements into NSF policy.
• Perform gap analyses to recommend updates and improvements to the NSF Cybersecurity Program.
• Collaborate with subject matter experts (SMEs), system owners, ISSOs, and other stakeholders to gather input and ensure policies are practical and implementable.
• Perform research on system security techniques and methodologies.
• Assist in development of security requirements and risk analysis.
• Assist in maintaining policy documentation, including version control, formatting, and repository management.
• Support governance processes such as policy reviews, comment adjudication, and working groups.
• Contribute to audit and compliance activities, including evidence collection and support for POA&M tracking.
• Help develop reports, metrics, and briefings related to compliance and program status.
• Stay current on changes to federal cybersecurity requirements and contribute to team awareness and updates.
• Support other functional areas on the Oversight & Compliance Team as needed.
• Cybersecurity Program Development: Contributes to drafting and maintenance of cybersecurity documentation, including authorization packages, risk assessments, reports, policies, and procedures.
• Research & Analysis: Applies strong research and analytical skills to translate cybersecurity regulations and risks into clear, actionable guidance.
• Regulatory Awareness: Applies knowledge of federal cybersecurity requirements to assigned tasks.
• Collaboration: Works effectively within a team and with stakeholders across technical and business areas.
• Perform other job-related duties as assigned.

Supervisory Responsibilities: No supervisory/management authority Basic Qualifications:

• Bachelor's degree in Cybersecurity, Information Systems, Public Policy, or related field.
• CompTIA Security+ certification (or the ability to obtain certification within 6 months of hire date)
• Familiarity with federal cybersecurity frameworks and requirements (e.g., NIST RMF, FISMA, OMB memoranda, DHS directives).
• Experience contributing to policy, procedure, or technical documentation.
• Ability to work collaboratively in a team environment and manage multiple assignments.
• Must be a US Citizen.
• This position requires an active Public Trust clearance or the ability to obtain a Public Trust clearance to be considered.
• Prolonged periods of sitting at a desk and working on a computer; may occasionally require standing or moving about the office for extended periods.
• Must pass pre-employment qualifications of Cherokee Federal.

Preferred Qualifications:

• 3-6 years of experience in cybersecurity, IT governance, compliance, or policy-related work.
• Experience supporting a federal agency or government contractor environment.
• Relevant certifications such as CGRC, CISSP, or CISM.
• Exposure to audit support, POA&M processes, or compliance tracking.
• Experience with document management or governance, risk, and compliance (GRC) tools (e.g., SharePoint, ServiceNow, Tenable Security Center).

Work Environment: Work is performed primarily in a climate-controlled environment. Company Information: Behind every government mission stands skilled, mission-driven talent: people whose expertise and dedication turn complex challenges into successful outcomes. Criterion Systems, part of Cherokee Federal, the federal contracting division of Cherokee Nation Businesses, is that team. We modernize aging systems, deliver care where it's needed most, and keep missions supplied, staffed, and moving across defense, intelligence, and civilian agencies. For more than 60 federal clients, we take on the work others won't, and deliver where it counts. If that's the kind of work you're looking for, you've found your team. Learn more at cherokee-federal.com. #CherokeeFederal #LI-SM2 Cherokee Federal is a military friendly employer. Veterans and active military transitioning to civilian status are encouraged to apply. Legal Disclaimer: All qualified applicants will receive consideration for employment without regard to protected veteran status, disability or any other status protected under applicable federal, state or local law. Many of our job openings require access to government buildings or military installations. Candidates must pass pre-employment qualifications of Cherokee Federal. For applicants located in Colorado, New York, California, Washington, Illinois, Hawaii, Massachusetts, or other states with pay transparency requirements: the estimated annual salary range for this position is $115,000 - $120,000. Actual compensation varies based on qualifications, experience, and location. Equal Employment Opportunity (EEO) Statement Cherokee Federal is a federal contractor subject to the Vietnam Era Veterans' Readjustment Assistance Act (VEVRAA). As required by VEVRAA, we take affirmative action to employ and advance in employment qualified protected veterans. Protected veterans are encouraged to self-identify during the application process. Cherokee Federal takes affirmative action to employ and advance in employment qualified individuals with disabilities in compliance with Section 503 of the Rehabilitation Act. Qualified individuals with disabilities are encouraged to self-identify during the application process. Reasonable accommodations are available to qualified individuals with disabilities or those with sincerely held religious beliefs. To request an accommodation in the application or interview process, please contact Human Resources at View email address on click.appcast.io. This position is subject to pre-employment drug testing. Cherokee Federal maintains a drug-free workplace in accordance with applicable federal and state laws and regulations. This position may be contingent upon the successful completion of a background investigation. The scope of the investigation will be commensurate with position requirements and applicable law.