Cybersecurity Policy Analyst

Cherokee Federal•United States,

18h•$115,000 - $120,000•Remote

About The Position

Cherokee Federal is seeking a Cybersecurity Analyst to support the U.S. National Science Foundation (NSF) Office of the Chief Information Officer (OCIO) as part of its Oversight and Compliance Team. The role supports the development and maintenance of cybersecurity policy in alignment with federal requirements. Working under the direction of the Cybersecurity Oversight and Compliance Lead, the analyst researches requirements, drafts policy content, and supports governance and compliance activities while collaborating with stakeholders across the organization. This is a full-time remote position supporting Cherokee Federal’s cybersecurity contract with the NSF in Alexandria, Virginia. The role operates within a structured federal compliance environment and collaborates with IT teams, security personnel, program offices, and senior stakeholders to support governance, risk, and compliance activities and maintain a strong cybersecurity posture across systems. The position requires U.S. citizenship or legal permanent residency and an active Public Trust clearance or the ability to obtain one.

Requirements

Bachelor’s degree in Cybersecurity, Information Systems, Public Policy, or a related field.
CompTIA Security+ certification, or ability to obtain certification within six months of hire.
Familiarity with federal cybersecurity frameworks and requirements, such as NIST RMF, FISMA, OMB memoranda, and DHS directives.
Experience contributing to policy, procedure, or technical documentation.
Ability to work collaboratively in a team environment and manage multiple assignments.
Must be a U.S. citizen or legal permanent resident and provide documentation verifying status.
Must have an active Public Trust clearance or be able to obtain one.
Must pass Cherokee Federal pre-employment qualifications.
Must pass pre-employment drug testing.
Prolonged periods of sitting at a desk and working on a computer; may occasionally need to stand or move about the office for extended periods.

Nice To Haves

Three to six years of experience in cybersecurity, IT governance, compliance, or policy-related work.
Experience supporting a federal agency or government contractor environment.
Relevant certifications such as CGRC, CISSP, or CISM.
Exposure to audit support, POA&M processes, or compliance tracking.
Experience with document management or governance, risk, and compliance tools such as SharePoint, ServiceNow, or Tenable Security Center.

Responsibilities

Support the development, revision, dissemination, and maintenance of NSF cybersecurity policies, standards, procedures, information system authorization packages, and reports in alignment with federal requirements.
Research and interpret federal cybersecurity guidance, including NIST publications and CISA directives, and help translate requirements into NSF policy.
Perform gap analyses and recommend updates and improvements to the NSF Cybersecurity Program.
Collaborate with subject matter experts, system owners, ISSOs, and other stakeholders to gather input and ensure policies are practical and implementable.
Research system security techniques and methodologies.
Assist in developing security requirements and conducting risk analysis.
Maintain policy documentation, including version control, formatting, and repository management.
Support governance processes such as policy reviews, comment adjudication, and working groups.
Contribute to audit and compliance activities, including evidence collection and POA&M tracking support.
Help develop reports, metrics, and briefings related to compliance and program status.
Stay current on changes to federal cybersecurity requirements and contribute to team awareness and updates.
Support other functional areas on the Oversight and Compliance Team as needed.
Draft and maintain cybersecurity documentation, including authorization packages, risk assessments, reports, policies, and procedures.
Perform other job-related duties as assigned.