Senior Cybersecurity Analyst with Security Clearance

Mayvin, Inc.; Alexandria (VA); On-site; USD 110,000 - 165,000; Full time

Job summary

Mayvin, Inc. seeks a Senior Cybersecurity Analyst to serve as a subject-matter expert in Cybersecurity Policy, Planning, and RMF implementation. This role tracks ATOs and RMF functions, reviews policies, and guides the integration of cybersecurity engineering throughout system lifecycles.

The incumbent acts as a trusted consultant to leadership, bridging compliance requirements, operational readiness, and technical solutions across acquisition and development phases.

Responsibilities

• Review DoN, DoD, and federal policies to ensure compliance with regulations.
• Advise leadership on emerging cybersecurity directives and policy impacts to mission systems.
• Monitor and track system authorization (ATO) efforts under NAVSEA RMF and provide early warnings of issues.
• Monitor and track data calls for compliance per directives (OPORD, TASKORD, etc.).
• Conduct and review system and program risk assessments to identify cybersecurity risks and mitigation strategies.
• Lead strategic initiatives to strengthen cybersecurity posture across programs.
• Represent the program office in high-level working groups, interagency forums, and technical exchanges.
• Partner with program managers, system engineers, and contractors to ensure cybersecurity is integrated throughout acquisition and development phases.
• Participate in the change management process, including security impact analyses and recommendations for approvals.

Job description

Mayvin is seeking a Senior Cybersecurity Analyst to serve as a subject-matter expert in Cybersecurity Policy, Planning, and Risk Management Framework (RMF) implementation. This role is responsible for tracking the status of Authority To Operate (ATOs) and other Risk Management Framework (RMF) functions, reviewing, analyzing, and interpreting cybersecurity policies, while also guiding and tracking the integration of cybersecurity engineering principles throughout system lifecycles. The incumbent will act as a trusted consultant to leadership, bridging the gap between compliance requirements, operational readiness, and technical solutions.

Responsibilities:

• Review cybersecurity policies, procedures, and directives to ensure compliance with DoN, DoD, and federal regulations (e.g., DoD 8500-series, NIST SP 800-series, Clinger Cohen Act, and various Defense Acquisition polices.
• Advise program leadership on emerging cybersecurity directives, regulatory and statutory changes, and policy impacts to mission systems.
• Monitor and track system authorization (ATO) efforts under the NAVSEA Risk Management Framework and provide early warnings of issues or when progress may be off track.
• Monitor and track various data calls for compliance in accordance with specific directives (OPORD, TASKORD, etc.).
• Conduct and review system and program risk assessments to identify cybersecurity risks and provide strategies for remediation and mitigation.
• Lead strategic initiatives to strengthen cybersecurity posture across programs, balancing operational effectiveness with security imperatives.
• Represent the program office in high-level working groups, interagency forums, and technical exchanges.
• Partner with program managers, system engineers, and contractors to ensure cybersecurity is integrated throughout acquisition and development phases.
• Participate in the change management process, including conducting security impact analyses and making recommendations to program management for approvals.