Cybersecurity Policy Analyst

Cherokee Federal • United States,

16h • $115,000 - $120,000 • Remote

About The Position

Cherokee Federal is seeking a Cybersecurity Analyst to support the U.S. National Science Foundation (NSF) Office of the Chief Information Officer (OCIO) as a member of its Oversight and Compliance Team. This position supports the development and maintenance of cybersecurity policy in alignment with federal requirements. The Cybersecurity Analyst will work as part of a small team of analysts under the direction of the Cybersecurity Oversight and Compliance Lead. The role focuses on researching requirements, drafting policy content, and supporting governance and compliance activities, while collaborating closely with stakeholders across the organization. This is a full-time remote position supporting Cherokee Federal’s cybersecurity contract with the U.S. National Science Foundation in Alexandria, VA. This position reports to the Cybersecurity Oversight and Compliance Lead, operates within a structured federal compliance environment, and requires collaboration with other IT teams, security personnel, program offices, and senior stakeholders. The role supports governance, risk, and compliance activities to maintain a strong cybersecurity posture across systems.

Requirements

• Bachelor’s degree in Cybersecurity, Information Systems, Public Policy, or related field.
• CompTIA Security+ certification (or the ability to obtain certification within 6 months of hire date)
• Familiarity with federal cybersecurity frameworks and requirements (e.g., NIST RMF, FISMA, OMB memoranda, DHS directives).
• Experience contributing to policy, procedure, or technical documentation.
• Ability to work collaboratively in a team environment and manage multiple assignments.
• Must be a US Citizen.
• This position requires an active Public Trust clearance or the ability to obtain a Public Trust clearance to be considered.
• Prolonged periods of sitting at a desk and working on a computer; may occasionally require standing or moving about the office for extended periods.
• Must pass pre-employment qualifications of Cherokee Federal.

Nice To Haves

• 3-6 years of experience in cybersecurity, IT governance, compliance, or policy-related work.
• Experience supporting a federal agency or government contractor environment.
• Relevant certifications such as CGRC, CISSP, or CISM.
• Exposure to audit support, POA&M processes, or compliance tracking.
• Experience with document management or governance, risk, and compliance (GRC) tools (e.g., SharePoint, ServiceNow, Tenable Security Center).

Responsibilities

• Support the development, revision, dissemination, and maintenance of NSF cybersecurity policies, standards, procedures, information system authorization packages, and reports in alignment with federal requirements (e.g., FISMA, OMB guidance).
• Research and interpret federal cybersecurity guidance (e.g., NIST publications, CISA directives) and assist in translating requirements into NSF policy.
• Perform gap analyses to recommend updates and improvements to the NSF Cybersecurity Program.
• Collaborate with subject matter experts (SMEs), system owners, ISSOs, and other stakeholders to gather input and ensure policies are practical and implementable.
• Perform research on system security techniques and methodologies.
• Assist in development of security requirements and risk analysis.
• Assist in maintaining policy documentation, including version control, formatting, and repository management.
• Support governance processes such as policy reviews, comment adjudication, and working groups.
• Contribute to audit and compliance activities, including evidence collection and support for POA&M tracking.
• Help develop reports, metrics, and briefings related to compliance and program status.
• Stay current on changes to federal cybersecurity requirements and contribute to team awareness and updates.
• Support other functional areas on the Oversight & Compliance Team as needed.
• Contributes to drafting and maintenance of cybersecurity documentation, including authorization packages, risk assessments, reports, policies, and procedures.
• Applies strong research and analytical skills to translate cybersecurity regulations and risks into clear, actionable guidance.
• Applies knowledge of federal cybersecurity requirements to assigned tasks.
• Works effectively within a team and with stakeholders across technical and business areas.
• Perform other job-related duties as assigned.

Benefits

• Up to a 6% 401(k) company match to help you build long-term financial security
• Paid time off as part of our comprehensive benefits package, so you have the flexibility to rest, recharge, and enjoy what matters most
• Medical, dental, and vision insurance, plus prescription drug coverage
• Basic life and AD&D insurance, with supplemental life options
• Short-term and long-term disability coverage
• Paid holidays
• Employee Assistance Program (EAP)
• Flexible Spending Account (FSA) and Health Savings Account (HSA) options
• Professional development, training, and certification support
• Voluntary benefits including accident, critical illness, and identity theft protection

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level