Remote RMF/A&A Cyber Risk Analyst

Cherokee Federal; United States; A distancia; USD 110.000 - 112.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

401(k) company match

Paid time off

Medical/dental/vision insurance

Life and AD&D insurance

Short/long-term disability

Holidays

EAP

FSA/HSA options

Professional development

Voluntary benefits

Descripción de la vacante

Cherokee Federal is seeking a Cybersecurity A&A Risk Analyst to provide advanced governance, risk, and compliance support for federal information systems under FISMA and RMF. This remote role emphasizes risk assessment, security documentation, and cross-functional collaboration with stakeholders. Requirements include 7+ years in cybersecurity with RMF/A&A background, relevant certifications, and U.S.

citizenship. Active Public Trust or ability to obtain is required; U.S.

Formación

• Bachelor’s degree in Cybersecurity, IT, Public Policy, or related discipline or equivalent experience.
• Professional certification such as CISSP, CISM, or CAP.
• Minimum of 7 years of progressive cybersecurity experience, including 4 years supporting federal RMF/A&A efforts.
• Demonstrated experience implementing the NIST RMF.

Responsabilidades

• Manage full lifecycle RMF activities per NIST 800-37.
• Develop, review, and maintain security documentation (SSPs, SAPs, SARs, POA&Ms).
• Review FedRAMP packages and updates for cloud services evaluation.

Conocimientos

GRC governance

RMF/A&A experience

NIST RMF framework

FedRAMP familiarity

Stakeholder engagement

Security risk assessments

Educación

Bachelor’s degree in Cybersecurity or related field

CISSP/CISM/CAP certification

Herramientas

ServiceNow

CSAM

Confluence

JIRA

Descripción del empleo

Cherokee Federal is seeking a Cybersecurity A&A Risk Analyst to provide advanced governance, risk, and compliance support for federal information systems under FISMA and RMF. This remote role emphasizes risk assessment, security documentation, and cross-functional collaboration with stakeholders. Requirements include 7+ years in cybersecurity with RMF/A&A background, relevant certifications, and U.S.

citizenship. Active Public Trust or ability to obtain is required; U.S.