Senior Cybersecurity Analyst

Senior Cybersecurity A&A Risk Analyst

The Senior Cybersecurity Assessment & Authorization (A&A) Risk Analyst provides advanced governance, risk, and compliance (GRC) support to federal information systems in alignment with the Federal Information Security Modernization Act (FISMA) and the NIST Risk Management Framework (RMF). This position is responsible for managing external service authorization activities, conducting security risk assessments, and supporting NSF's continuous monitoring efforts. The role requires strong analytical, documentation, and stakeholder engagement skills to ensure federal systems maintain compliance with applicable federal laws, regulations, and directives.

This is a full-time remote position supporting Cherokee Federal's cybersecurity contract with the U.S. National Science Foundation in Alexandria, VA. This position reports to the Cybersecurity Oversight and Compliance Lead, operates within a structured federal compliance environment, and requires collaboration with system owners, security personnel, program offices, and senior stakeholders. The role supports ongoing authorization, governance initiatives, and periodic oversight reviews to maintain a strong cybersecurity posture across systems.

Compensation & Benefits:

Starting Salary Range for Senior Cybersecurity A&A Risk Analyst: $130,000 – $135,000

Benefits That Set Us Apart

When considering your next opportunity, compensation is only part of the picture. We offer a benefits package designed to invest in your future and support your life outside of work.

Highlights include:

•Up to a 6% 401(k) company match to help you build long-term financial security

•Paid time off as part of our comprehensive benefits package, so you have the flexibility to rest, recharge, and enjoy what matters most

•Medical, dental, and vision insurance, plus prescription drug coverage

•Basic life and AD&D insurance, with supplemental life options

•Short-term and long-term disability coverage

•Paid holidays

•Employee Assistance Program (EAP)

•Flexible Spending Account (FSA) and Health Savings Account (HSA) options

•Professional development, training, and certification support

•Voluntary benefits including accident, critical illness, and identity theft protection

Because taking care of our employees isn't just a promise, it's part of who we are.

Benefits are subject to change and eligibility requirements apply.

Essential Functions, Duties & Responsibilities:

Includes the following:

•Manage full lifecycle Risk Management Framework (RMF) activities in accordance with NIST Special Publication 800-37.

•Develop, review, and maintain security authorization documentation, including System Security Plans (SSPs), Security Assessment Plans (SAPs), Security Assessment Reports (SARs), and Plans of Action and Milestones (POA&Ms).

•Review and assess FedRAMP authorization packages, and package updates, to support the evaluation and use of cloud services.

•Monitor ATO packages in the FedRAMP Secure Repository

•Communicate with system owners, information systems security officers (ISSOs), Cloud Service Providers, and security stakeholders frequently to review significant system changes and ensure continued compliance with federal security requirements.

•Evaluate and validate implementation of security controls defined in NIST Special Publication 800-53 Rev. 5, including inherited and agency-implemented controls.

•Conduct risk assessments using methodologies consistent with NIST Special Publication 800-30 and provide risk analysis and recommendations to Authorizing Officials and senior stakeholders.

•Support continuous monitoring and ongoing authorization activities by reviewing vulnerability scans, tracking POA&Ms, and coordinating remediation efforts.

•Perform other job-related duties as assigned.

Supervisory Responsibilities:

No supervisory/management authority

Basic Qualifications:

•Bachelor's degree in Cybersecurity, Information Technology, Public Policy, or related discipline (or equivalent experience).

•Professional certification(s) such as CISSP, CISM, or CAP.

•Minimum of 7 years of progressive cybersecurity experience, including at least 4 years supporting federal RMF/A&A efforts.

•Demonstrated experience implementing the NIST Risk Management Framework.

Federal Risk and Authorization Management Program (FedRAMP):

•Federal Information Security Modernization Act (FISMA)

•Federal Zero Trust Strategy (OMB M-22-09)

•Familiarity with federal cloud security requirements and FedRAMP-authorized environments.

•Experience supporting Moderate and/or High impact systems.

•Experience with Microsoft 365 office applications.

•Ability to engage effectively with technical teams and executive leadership.

•Active Public Trust clearance or ability to obtain.

•Must be a US Citizen.

•This position requires an active Public Trust clearance or the ability to obtain a Public Trust clearance to be considered.

•Prolonged periods of sitting at a desk and working on a computer; may occasionally require standing or moving about the office for extended periods.

•Must pass pre-employment qualifications of Cherokee Federal.

Preferred Qualifications:

•Experience with ServiceNow, CSAM and/or comparable GRC tools.

•Familiarity with Atlassian Confluence and JIRA.

•Experience contributing to enterprise-level cybersecurity policy initiatives.

•Familiarity with guidance pertaining to responsible AI usage by federal agencies (e.g., Executive Order 13960, OMB M-25-21 and M-25-22).

•Experience supporting federal research or grant-management systems.

Work Environment:

Work is performed primarily in a climate-controlled environment.

Company Information:

Behind every government mission stands skilled, mission-driven talent: people whose expertise and dedication turn complex challenges into successful outcomes. Criterion Systems, part of Cherokee Federal, the federal contracting division of Cherokee Nation Businesses, is that team. We modernize aging systems, deliver care where it's needed most, and keep missions supplied, staffed, and moving across defense, intelligence, and civilian agencies. For more than 60 federal clients, we take on the work others won't, and deliver where it counts. If that's the kind of work you're looking for, you've found your team. Learn more at cherokee-federal.com.

Cherokee Federal is a military friendly employer. Veterans and active military transitioning to civilian status are encouraged to apply.

Legal Disclaimer:

All qualified applicants will receive consideration for employment without regard to protected veteran status, disability or any other status protected under applicable federal, state or local law.

Many of our job openings require access to government buildings or military installations. Candidates must pass pre-employment qualifications of Cherokee Federal.

For applicants located in Colorado, New York, California, Washington, Illinois, Hawaii, Massachusetts, or other states with pay transparency requirements: the estimated annual salary range for this position is $130,000 – $135,000. Actual compensation varies based on qualifications, experience, and location.

Equal Employment Opportunity (EEO) Statement

Cherokee Federal is a federal contractor subject to the Vietnam Era Veterans' Readjustment Assistance Act (VEVRAA). As required by VEVRAA, we take affirmative action to employ and advance in employment qualified protected veterans. Protected veterans are encouraged to self-identify during the application process.

Cherokee Federal takes affirmative action to employ and advance in employment qualified individuals with disabilities in compliance with Section 503 of the Rehabilitation Act. Qualified individuals with disabilities are encouraged to self-identify during the application process.

Reasonable accommodations are available to qualified individuals with disabilities or those with sincerely held religious beliefs. To request an accommodation in the application or interview process, please contact Human Resources at View email address on click.appcast.io.

This position is subject to pre-employment drug testing. Cherokee Federal maintains a drug-free workplace in accordance with applicable federal and state laws and regulations.

This position may be contingent upon the successful completion of a background investigation. The scope of the investigation will be commensurate with position requirements and applicable law.