Cybersecurity Analyst

This is a fully remote position, open to applicants in United States.

📋 Description

• Assist in the development, implementation, and ongoing enhancement of the U.S. National Science Foundation (NSF) program

• Assess systems, programs, technologies, and business processes for privacy risks and compliance obligations

• Offer guidance for the protection of Personally Identifiable Information (PII)

• Collaborate with the A&A Team to create PTAs and PIAs, identify privacy risks, and formulate mitigation strategies

• Create, review, and maintain PIAs, SORNs, ISAs, MOUs, inventories, and associated documentation

• Counsel system owners on privacy stipulations and integrate privacy considerations throughout the secure Software Development Life Cycle (SDLC)

• Analyze new technologies, systems, programs, contracts, and online activities for privacy implications

• Keep abreast of federal privacy laws, regulations, policies, and guidelines, including the Privacy Act, E-Government Act, and FISMA privacy standards

• Assist with privacy compliance assessments and pinpoint gaps that necessitate corrective measures

• Merge privacy and cybersecurity requirements for systems and services that handle PII

• Collaborate with the Policy Team to formulate privacy policies, procedures, processes, templates, and recommendations for program enhancements

• Generate privacy metrics and documentation necessary for FISMA privacy reporting

• Prepare privacy briefings, reports, status updates, and recommendations for government stakeholders

• Investigate emerging privacy practices, regulations, technologies, and industry standards

• Maintain schedules for assessments, action items, and audit-ready privacy documentation

• Facilitate process improvements and automation of privacy workflows

• Maintain team trackers and carry out administrative duties for the Oversight & Compliance Team

• Execute other job-related responsibilities as assigned

⛳️ Requirements

• Bachelor's degree or equivalent professional experience in cybersecurity, privacy, information technology, information assurance, or a related field

• 3–5+ years of experience in cybersecurity, privacy, GRC, compliance, risk management, or similar roles

• Familiarity with privacy assessments, risk evaluations, compliance reviews, or related analytical tasks

• Working knowledge of federal privacy regulations and PII protection

• Capability to handle multiple tasks and meet deadlines within a federal contracting setting

• Ability to secure and retain necessary federal credentials

• Must be a U.S. Citizen

• Active Public Trust clearance or the ability to obtain a Public Trust clearance

• Extended periods of sitting at a desk and using a computer

• Must pass pre-employment qualifications set by Cherokee Federal

• Preferred: CIPP/G or equivalent privacy certification

• Preferred: Security+, CAP, CISSP, CISM, or CRISC certifications

• Preferred: Experience with Federal Privacy Programs

• Preferred: Familiarity with PTAs, PIAs, SORNs, FISMA privacy reporting, and NIST privacy/cybersecurity guidelines

• Preferred: Experience integrating privacy considerations into the SDLC

• Preferred: Experience in assessing cloud, SaaS, external services, or emerging technologies

• Preferred: Proficiency with ServiceNow, Jira, Confluence, SharePoint, CSAM/JCAM, Archer, or similar GRC/workflow platforms

🏝️ Benefits

• Up to a 6% 401(k) company match

• Paid time off

• Medical, dental, and vision insurance

• Prescription drug coverage

• Basic life and AD&D insurance

• Options for supplemental life insurance

• Coverage for short-term and long-term disability

• Paid holidays

• Employee Assistance Program (EAP)

• Flexible Spending Account (FSA) and Health Savings Account (HSA) options

• Support for professional development, training, and certification

• Voluntary accident, critical illness, and identity theft protection