Governance Analyst

This is a fully remote position, open to applicants in United States.

📋 Description

• Ensure traceability from Federal Zero Trust guidelines and VA objectives to assessment criteria, architectural patterns, and implementation priorities.

• Assist in the preparation and documentation for Architecture Review Boards, technical evaluations, and executive governance meetings.

• Maintain logs of decisions, records of exceptions, architectural deviation documentation, and governance action tracking.

• Review outputs for alignment with approved terminology, standards, defined scope boundaries, and documented Government priorities.

• Aid in the governance of reusable pattern families, common system variants, and updates prompted by lessons learned during implementation.

• Coordinate the documentation required to transition implementation results into sustainable governance and RMF processes.

• Support the implementation of security capabilities, assess technical solutions, maintain cybersecurity tools, and assist operational teams in translating security architecture into repeatable practices.

• Collaborate closely with vulnerability management, incident response, RMF, and ISSO teams to promote operational risk reduction and ongoing improvement.

⛳️ Requirements

• Bachelor’s degree in Cybersecurity, Information Systems, Public Policy, Business, or a related discipline.

• Minimum of three years of experience in cybersecurity governance, architectural governance, compliance, or Federal IT policy.

• Familiarity with NIST SP 800-207, CISA Zero Trust Maturity Model, EO 14028, and Federal cybersecurity governance.

• Proven experience in maintaining decision logs, standards traceability, and governance documentation.

• Excellent analytical writing and stakeholder coordination capabilities.

• Experience in supporting Federal architecture review or cybersecurity governance boards is preferred.

• Knowledge of FISMA, RMF, OMB memoranda, and Binding Operational Directives is preferred.

• Experience with policy mapping or requirements traceability tools is preferred.

• One or more of CGRC, CISSP, CISM, or Security+ certifications is preferred.

🏝️ Benefits

• Competitive salary and performance-based bonuses.

• Comprehensive health, dental, and vision insurance.

• Generous paid time off and holiday leave.

• Professional development opportunities and continuing education support.