Cybersecurity Policy Analyst

This is a fully remote position, open to applicants in United States.

📋 Description

• Assist in the development, revision, dissemination, and upkeep of NSF cybersecurity policies, standards, procedures, authorization packages, and reports in accordance with federal regulations.

• Conduct research and interpret federal cybersecurity guidelines, including NIST publications and CISA directives, and convert requirements into NSF policy.

• Execute gap analyses and suggest enhancements to the NSF Cybersecurity Program.

• Collaborate with subject matter experts (SMEs), system owners, Information System Security Officers (ISSOs), and stakeholders to gather insights and ensure that policies are practical and implementable.

• Investigate system security methodologies and techniques.

• Aid in the development of security requirements and risk analysis.

• Maintain policy documentation, including version control, formatting, and repository management.

• Support policy reviews, comment adjudication, working groups, audit and compliance activities, evidence collection, and POA&M tracking.

• Create reports, metrics, and presentations related to compliance and program status.

• Monitor changes to federal cybersecurity requirements and enhance team awareness.

• Assist other functional areas of the Oversight & Compliance Team as necessary.

⛳️ Requirements

• Bachelor’s degree in Cybersecurity, Information Systems, Public Policy, or a related discipline.

• CompTIA Security+ certification, or the ability to acquire certification within six months of the hire date.

• Familiarity with federal cybersecurity frameworks and requirements, including NIST RMF, FISMA, OMB memoranda, and DHS directives.

• Experience in contributing to policy, procedure, or technical documentation.

• Ability to work collaboratively in a team setting and manage multiple tasks.

• Must be a US Citizen.

• Active Public Trust clearance or the capability to obtain one.

• Must meet the pre-employment qualifications set by Cherokee Federal.

• Extended periods of sitting at a desk and using a computer; may occasionally require standing or moving around the office for extended durations.

• Preferred: 3-6 years of experience in cybersecurity, IT governance, compliance, or policy-related work.

• Preferred: Experience in a federal agency or government contractor environment.

• Preferred: Relevant certifications such as CGRC, CISSP, or CISM.

• Preferred: Exposure to audit support, POA&M processes, or compliance tracking.

• Preferred: Experience with document management or GRC tools such as SharePoint, ServiceNow, and Tenable Security Center.

🏝️ Benefits

• Up to a 6% 401(k) company match.

• Paid time off.

• Medical, dental, and vision insurance.

• Prescription drug coverage.

• Basic life and AD&D insurance.

• Supplemental life insurance options.

• Short-term and long-term disability coverage.

• Paid holidays.

• Employee Assistance Program (EAP).

• Flexible Spending Account (FSA).

• Health Savings Account (HSA) options.

• Support for professional development, training, and certification.

• Voluntary accident, critical illness, and identity theft protection.