The Data Analyst is responsible for the volume layer of the assessment: intaking entity responses, reviewing submitted evidence for completeness, entering Assessor-validated scores into the master Question Bank workbook, maintaining the entity tracker, and transcribing finalized, banded risk data into the Florida Cybersecurity Standards Tool. This role does not make assessment judgment calls - self-reported and unvalidated scores never flow to a deliverable through this role; validation authority stays with the Assessors., * Log incoming Self-Assessment Questionnaire (SAQ) submissions and evidence uploads per entity in the Deliverables & Entity Tracker workbook; flag missing or late responses for the chase/escalation process.

• Perform first-pass evidence review: confirm each of the ~90 questions per entity carries its required artifact (policy doc, screenshot, export, register) per the Question Bank’s “Evidence to Request” column; flag claimed-but-unverified scores for Assessor interview follow-up.
• Enter Assessor-validated scores (0-10 scale) into each entity’s Question Bank copy; keep Category Rollup formulas intact and flag any that break.
• Populate the Risk Model tab: apply the NIST 800-30 semi-quantitative formula (Likelihood × Impact / 2) and confirm banding (Low 0-15 / Moderate 16-29 / High 30-50) for every risk scenario, across all 31 entities.
• Draft the data inputs for per-entity remediation schedule/cost estimates for Assessor review.
• Transcribe validated, banded risk data into the Florida Cybersecurity Standards Tool (60GG-2 FCST), using the Annex A, Exhibit A-1 crosswalk (23 categories mapped to NIST SP 800-53 control families) to keep every entity’s tool submission structurally identical.
• Support the internal QA pass required before D2/D3 submission - target is zero unresolved formula or reference errors across all 31 entity tools.
• Maintain the comment-resolution log capturing FDOE/DEL feedback disposition during the 7-day D2 review window.

• Advanced Microsoft Excel proficiency: formulas, cross-sheet references, data validation, troubleshooting broken linked formulas across multi-tab workbooks. This is the single highest-leverage skill for this role - the entire instrument is Excel-based.
• High attention to detail and comfort with repetitive, structured data work at volume (multiple thousand line items across 31 near-identical workbooks).
• Ability to follow a defined evidence-review protocol consistently without deviation - consistency across 31 entities is a contract requirement, not a nicety.
• Must pass Florida Level 2 background screening (Livescan + FBI) prior to any access to entity data - non-negotiable, per RFQ Attachment V and the Project Plan’s compliance section. Budget lead time for this before any analyst touches live data.
• Comfortable working exclusively through an FDOE-approved secure electronic channel - no data or evidence handling on portable media, ever., * Prior exposure to NIST Cybersecurity Framework (CSF) or NIST SP 800-53 terminology - helpful for context, not required for entry-level hires. Trainable at kickoff.
• Prior GRC, IT audit support, or data-QA experience in a government or regulated-industry setting.
• Experience with large multi-entity or multi-site data consolidation projects.

IND