> Markdown version of [/jobs/ext/3772668-senior-cybersecurity-analyst](https://www.wearedevelopers.com/jobs/ext/3772668-senior-cybersecurity-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Senior Cybersecurity Analyst

- **Company:** Cherokee Federal
- **Location:** Tulsa, OK, United States (Remote available)
- **Experience:** Expert
- **Salary:** $130,000.0 - $135,000.0
- **Contract:** Permanent contract
- **Skills:** Microsoft Windows, Confluence, JIRA, Cloud Computing Security, Cyber Security, Information Systems, Office Suite, Cloud Services, Smartsuite, Zero Trust Network Access, SARS Software Products, Information Technology, Servicenow
- **Published:** October 16, 2026
- **Apply:** https://www.techcareers.com/job.asp?id=3448989048&tx=VT6762TYD&pt=1&aff=0B19D771-A501-4A5E-8338-2A822B784D54&utm_source=Job%20Feed&utm_medium=textkernel&utm_campaign=DE&utm_term=0B19D771-A501-4A5E-8338-2A822B784D54

## About the Role

* Bachelor's degree in Cybersecurity, Information Technology, Public Policy, or related discipline (or equivalent experience).
 * Professional certification(s) such as CISSP, CISM, or CAP.
 * Minimum of 7 years of progressive cybersecurity experience, including at least 4 years supporting federal RMF/A&A efforts.
 * Demonstrated experience implementing the NIST Risk Management Framework.

Federal Risk and Authorization Management Program (FedRAMP):

 * Federal Information Security Modernization Act (FISMA)
 * Federal Zero Trust Strategy (OMB M-22-09)
 * Familiarity with federal cloud security requirements and FedRAMP-authorized environments.
 * Experience supporting Moderate and/or High impact systems.
 * Experience with Microsoft 365 office applications.
 * Ability to engage effectively with technical teams and executive leadership.
 * Active Public Trust clearance or ability to obtain.
 * Must be a US Citizen.
 * This position requires an active Public Trust clearance or the ability to obtain a Public Trust clearance to be considered.
 * Prolonged periods of sitting at a desk and working on a computer; may occasionally require standing or moving about the office for extended periods.
 * Must pass pre-employment qualifications of Cherokee Federal., * Experience with ServiceNow, CSAM and/or comparable GRC tools.
 * Familiarity with Atlassian Confluence and JIRA.
 * Experience contributing to enterprise-level cybersecurity policy initiatives.
 * Familiarity with guidance pertaining to responsible AI usage by federal agencies (e.g., Executive Order 13960, OMB M-25-21 and M-25-22).
 * Experience supporting federal research or grant-management systems.

## Description

The Senior Cybersecurity Assessment & Authorization (A&A) Risk Analyst provides advanced governance, risk, and compliance (GRC) support to federal information systems in alignment with the Federal Information Security Modernization Act (FISMA) and the NIST Risk Management Framework (RMF). This position is responsible for managing external service authorization activities, conducting security risk assessments, and supporting NSF's continuous monitoring efforts. The role requires strong analytical, documentation, and stakeholder engagement skills to ensure federal systems maintain compliance with applicable federal laws, regulations, and directives., Includes the following

 * Manage full lifecycle Risk Management Framework (RMF) activities in accordance with NIST Special Publication 800-37.
 * Develop, review, and maintain security authorization documentation, including System Security Plans (SSPs), Security Assessment Plans (SAPs), Security Assessment Reports (SARs), and Plans of Action and Milestones (POA&Ms).
 * Review and assess FedRAMP authorization packages, and package updates, to support the evaluation and use of cloud services.
 * Monitor ATO packages in the FedRAMP Secure Repository
 * Communicate with system owners, information systems security officers (ISSOs), Cloud Service Providers, and security stakeholders frequently to review significant system changes and ensure continued compliance with federal security requirements.
 * Evaluate and validate implementation of security controls defined in NIST Special Publication 800-53 Rev. 5, including inherited and agency-implemented controls.
 * Conduct risk assessments using methodologies consistent with NIST Special Publication 800-30 and provide risk analysis and recommendations to Authorizing Officials and senior stakeholders.
 * Support continuous monitoring and ongoing authorization activities by reviewing vulnerability scans, tracking POA&Ms, and coordinating remediation efforts.
 * Perform other job-related duties as assigned.