Senior Remote Federal A&A RMF Risk Analyst

Cherokee Federal; Alexandria (VA); Hybrid; USD 130,000 - 135,000; Full time

Benefits offered by this job

401(k) match up to 6%

Paid time off

Medical/dental/vision insurance

Life insurance

Disability coverage

Paid holidays

EAP

Job summary

Cherokee Federal is hiring a Senior Cybersecurity A&A Risk Analyst to provide advanced GRC support for federal information systems under FISMA and the NIST RMF. The role focuses on authorization activities, security risk assessments, and continuous monitoring within a federal contract for NSF in Alexandria, VA.

The position requires close collaboration with system owners, ISSOs, and senior stakeholders, and mandates an active Public Trust clearance or the ability to obtain one.

Qualifications

• Bachelor’s degree in Cybersecurity, Information Technology, Public Policy, or related discipline (or equivalent experience).
• Professional certification(s) such as CISSP, CISM, or CAP.
• Minimum of 7 years of progressive cybersecurity experience, including at least 4 years supporting federal RMF/A&A efforts.
• Demonstrated experience implementing the NIST Risk Management Framework.

Responsibilities

• Manage full lifecycle Risk Management Framework (RMF) activities in accordance with NIST SP 800-37.
• Develop, review, and maintain security authorization documentation, including SSPs, SAPs, SARs, and POA&M.
• Review and assess FedRAMP authorization packages and updates.
• Monitor ATO packages in FedRAMP Secure Repository.
• Communicate with system owners, ISSOs, CSPs, and security stakeholders to review significant system changes.

Skills

GRC skills

Security risk assessments

Stakeholder engagement

NIST RMF knowledge

Education

Bachelor's degree in Cybersecurity or related

CISSP/CISM/CAP certification

Tools

ServiceNow

CSAM

Job description

Cherokee Federal is hiring a Senior Cybersecurity A&A Risk Analyst to provide advanced GRC support for federal information systems under FISMA and the NIST RMF. The role focuses on authorization activities, security risk assessments, and continuous monitoring within a federal contract for NSF in Alexandria, VA.

The position requires close collaboration with system owners, ISSOs, and senior stakeholders, and mandates an active Public Trust clearance or the ability to obtain one.