[Hiring] Cyber Security Analyst @Cherokee Federal

Role Description

The Senior Maritime Cybersecurity Analyst provides expert cybersecurity support to the MARAD Information Assurance Program, supporting system authorization, continuous monitoring, and Authority to Operate (ATO) activities for maritime information systems. This role works closely with MARAD program offices, Information System Owners, and ISSMs to manage security documentation, assess risk, support compliance with federal and maritime cybersecurity requirements, and strengthen the security posture of IT and OT systems supporting maritime operations.

Responsibilities

• Provide support to the MARAD Information Assurance Program for operations, business, and administrative in support of the System Authorization Process.
• Direct involvement with MARAD Program Office and the Information System Security Manager (ISSM) on cybersecurity and authority to operate (ATO) matters.
• Manage MARAD’s Information System’s core documentation in accordance with each phase of the system engineering process/System Development Life Cycle (SDLC).
• Provide information system data for Privacy Impact Assessments (PIAs), Privacy Threshold Analyses (PTAs), and System of Record Notices (SORNs).
• Support creation/update of FIPS 199 Security Categorization document.
• Support creation/update security control selection listing.
• Support creation/update System Security Plan (SSP).
• Support creation/update Information System Configuration Management Plan.
• Support creation/update Information System Account Management Plan.
• Support creation/update Audit Log Monitoring Plan.
• Develop and Maintain Inventory of Information System Interconnections.
• Support creation/update Risk Assessment and relevant impact rating.
• Assist the Information System Owner (ISO), Business Sponsor, and ISSM in recording all known security weaknesses in the Plans of Action and Milestones (POA&M’s).
• Develop Draft Plan of Action and Milestones (POA&M) for observed control level deficiencies.
• Support the information system contingency planning process in accordance with NIST SP 800-34 Revision.
• Assist in security incident response, risk mitigation, and compliance reporting.
• Perform other job-related duties as assigned.

Qualifications

• 10+ years of experience in cybersecurity, with expertise in maritime/vessel cybersecurity, IT/OT security, and federal cybersecurity policies.
• US Navy or Coastguard Maritime Cyber Security Experience highly desired.
• Strong knowledge of NIST RMF, NIST Cybersecurity Framework (CSF), FISMA, and Navy or U.S. Coast Guard Maritime Organization cybersecurity requirements.
• Experience with Continuous Diagnostics and Mitigation (CDM), Information Security Continuous Monitoring (ISCM), and Identity, Credential, and Access Management (ICAM).
• Proven ability to lead cybersecurity assessments, compliance audits, and risk management activities.
• Understanding of the principles, methods, and tools of quality assurance and quality control.
• Proficiency in Microsoft Office Suite, Power BI, Tableau, and SharePoint.
• Must pass pre-employment qualifications of Cherokee Federal.

Requirements

• Active Public Trust clearance or ability to obtain a Public Trust clearance.
• Prior US Navy or Coastguard Maritime Cyber Security Experience.

Benefits

• Estimated Starting Salary Range: $150,000 - $155,000.
• Full-time benefits include Medical, Dental, Vision, 401K, and other possible benefits.
• Benefits are subject to change with or without notice.