Cybersecurity C&A Analyst (OT)

Jobgether

14h • Remote

About The Position

This role is designed for a cybersecurity professional with deep expertise in the Risk Management Framework (RMF) and operational technology (OT) systems. The Cybersecurity C&A Analyst will serve as a subject matter expert, guiding the assessment, authorization, and risk evaluation of complex IT and OT systems. You will work closely with system owners, vendors, and leadership to ensure compliance with NIST standards and DoD cybersecurity policies. The position requires translating technical cybersecurity requirements into actionable recommendations, conducting risk assessments, and communicating findings to senior management. It combines independent analysis with cross-functional collaboration, providing the opportunity to influence security posture and operational resilience within a fast-paced, mission-critical environment.

Requirements

• 5+ years of relevant C&A experience, including RMF, NIST C&A, and DoD cybersecurity practices.
• Active DoD Secret Clearance and eligibility for IT-II.
• Relevant certification meeting DoD 8570.01 IAM Level III requirements.
• Experience assessing security controls and performing authorization reviews for large, complex organizations.
• Strong understanding of OT systems and their security considerations; familiarity with NIST 800-82 and ISA/IEC 62443 preferred.
• Excellent verbal and written communication skills, with the ability to convey technical information clearly to small and large teams.
• Analytical mindset with attention to detail and capability to manage multiple assessments simultaneously.

Responsibilities

• Serve as the primary cybersecurity SME for assessing and authorizing information systems under RMF guidelines.
• Conduct risk assessments for OT and IT systems, including Facility Related Control Systems (FRCS), and provide guidance on mitigation strategies.
• Evaluate security controls based on NIST 800-53, NIST 800-82, and ISA/IEC 62443 standards, and ensure systems meet regulatory requirements.
• Support system owners, vendors, and cross-functional teams with compliance guidance, policy interpretation, and RMF implementation.
• Employ cybersecurity tools such as eMASS, STIG Viewer, ForeScout, and ACAS to evaluate and monitor security risk.
• Brief senior management on the progress, outcomes, and risk posture of assigned assessments.
• Review plans, policies, and procedures, providing actionable recommendations to strengthen cybersecurity controls.

Benefits

• Comprehensive medical, dental, and vision plans (PPO & HSA options).
• Flexible Spending Accounts (Health Care & Dependent Care FSA) and Health Savings Accounts (HSA).
• 401(k) with matching contributions and Roth options.
• Qualified Transportation Expense benefits.
• Short Term and Long Term Disability coverage.
• Life and Accidental Death & Dismemberment Insurance.
• Wellness program and professional development reimbursement.
• Paid Time Off and 11 company holidays.
• Remote-friendly environment with structured support for employee growth and engagement.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed