Cherokee Federal Logo

Cherokee Federal

Cybersecurity Analyst

Posted 8 Hours Ago
Remote
Hiring Remotely in United States
115K-117K Annually
Mid level
Remote
Hiring Remotely in United States
115K-117K Annually
Mid level
Supports federal privacy and cybersecurity compliance by conducting Privacy Threshold Assessments, Privacy Impact Assessments, and related reviews. Maintains SORNs, ISAs, MOUs, inventories, metrics, and audit-ready documentation. Advises system owners on PII protection and privacy integration throughout the SDLC, monitors federal privacy requirements, supports FISMA reporting, develops training materials, and recommends process improvements.
The summary above was generated by AI

Job Title: Cybersecurity Analyst - Privacy & Training

Job Code: ITS262

Location: Remote

Reports to: Program Manager

FLSA Status: Exempt

Supervisory: No supervisory/management authority

Prepared Date: 10/9/2026


A government contract requires that this position be restricted to U.S. citizens or legal permanent residents. You must provide documentation that you are a U.S. citizen or legal permanent resident to qualify.

This position requires an active Public Trust clearance or the ability to obtain a Public Trust clearance to be considered.

Position Summary:

The Cybersecurity Analyst (Privacy & Training) reports to the Oversight & Compliance Lead and supports the development, implementation, and continuous improvement of program. The analyst evaluates systems, programs, technologies, and business processes for privacy risks and compliance requirements and provides guidance to protect Personally Identifiable Information (PII). The position works with system owners, cybersecurity personnel, program managers, and privacy leadership to conduct Privacy Threshold Assessments (PTAs), Privacy Impact Assessments (PIAs), Systems of Records Notices (SORNs), and related privacy reviews and documentation.  The analyst maintains and tracks Interconnection Security Agreements (ISAs), security Memoranda of Understanding (MOUs), and the Information Security Systems Inventory (ISSI). The Cybersecurity Analyst (Privacy & Training) also supports the development, distribution, and tracking of federally mandated cybersecurity and privacy training presentations for employees and contractors.

Compensation & Benefits:

Starting Salary Range for Cybersecurity Analyst - Privacy & Training: $115,000 – $117,000

Benefits That Set Us Apart

When considering your next opportunity, compensation is only part of the picture. We offer a benefits package designed to invest in your future and support your life outside of work.

Highlights include:

• Up to a 6% 401(k) company match to help you build long-term financial security

• Paid time off as part of our comprehensive benefits package, so you have the flexibility to rest, recharge, and enjoy what matters most

• Medical, dental, and vision insurance, plus prescription drug coverage

• Basic life and AD&D insurance, with supplemental life options

• Short-term and long-term disability coverage

• Paid holidays

• Employee Assistance Program (EAP)

• Flexible Spending Account (FSA) and Health Savings Account (HSA) options

• Professional development, training, and certification support

• Voluntary benefits including accident, critical illness, and identity theft protection

Because taking care of our employees isn’t just a promise, it’s part of who we are.

Benefits are subject to change and eligibility requirements apply.

Essential Functions, Duties & Responsibilities:

Includes the following:

• Coordinates with the A&A Team to develop PTAs and PIAs, identify privacy risks, and develop mitigation recommendations.

• Develop, review, and maintain PIAs, SORNs, ISAs, MOUs, inventories and supporting documentation.

• Advise system owners on privacy requirements and ensure privacy is incorporated throughout the secure Software Development Lifecycle (SDLC).

• Works with the A&A Team to evaluate new technologies, systems, programs, contracts, and online activities for privacy impacts.

• Monitor applicable federal privacy laws, regulations, policies, and guidance, including the Privacy Act, E-Government Act, and FISMA privacy requirements.

• Support privacy compliance reviews and identify gaps requiring corrective action.

• Support integration of privacy and cybersecurity requirements for systems and services processing PII.

• Works with the Policy Team to develop privacy policies, procedures, processes, templates, and program improvement recommendations.

• Develop privacy metrics and documentation supporting FISMA privacy reporting.

• Prepare privacy briefings, reports, status updates, and recommendations for government stakeholders.

• Research emerging privacy practices, regulations, technologies, and industry best practices.

• Maintain assessment schedules, action items, and audit-ready privacy documentation.

• Support process improvement and automation of privacy workflows.

• Performs administrative tasks for the Oversight & Compliance Team, maintaining various trackers and supporting other members as needed.

• Perform other job-related duties as assigned.

Supervisory Responsibilities:

No supervisory/management authority

Basic Qualifications:

• Bachelor's degree or equivalent professional experience in cybersecurity, privacy, information technology, information assurance, or related field.

• 3–5+ years of experience in cybersecurity, privacy, GRC, compliance, risk management, or related work.

• Experience with privacy assessments, risk assessments, compliance reviews, or similar analytical activities.

• Working knowledge of federal privacy requirements and PII protection.

• Ability to manage multiple assignments and meet deadlines in a federal contracting environment.

• Ability to obtain and maintain required federal credentials.

• Must be a US Citizen.

• This position requires an active Public Trust clearance or the ability to obtain a Public Trust clearance to be considered.

• Prolonged periods of sitting at a desk and working on a computer; may occasionally require standing or moving about the office for extended periods.

• Must pass pre-employment qualifications of Cherokee Federal.

Preferred Qualifications:

• CIPP/G or comparable privacy certification.

• Security+, CAP, CISSP, CISM, or CRISC.

• Federal Privacy Program experience.

• Experience with PTAs, PIAs, SORNs, FISMA privacy reporting, and NIST privacy/cybersecurity guidance.

• Experience integrating privacy into the SDLC.

• Experience assessing cloud, SaaS, external services, or emerging technologies.

• Experience with ServiceNow, Jira, Confluence, SharePoint, CSAM/JCAM, Archer, or similar GRC/workflow platforms.

Work Environment:

Work is performed primarily in a climate-controlled environment.

Company Information:

Behind every government mission stands skilled, mission-driven talent: people whose expertise and dedication turn complex challenges into successful outcomes. Criterion Systems, part of Cherokee Federal, the federal contracting division of Cherokee Nation Businesses, is that team. We modernize aging systems, deliver care where it’s needed most, and keep missions supplied, staffed, and moving across defense, intelligence, and civilian agencies. For more than 60 federal clients, we take on the work others won’t, and deliver where it counts. If that’s the kind of work you’re looking for, you’ve found your team. Learn more at cherokee-federal.com.

#CherokeeFederal #LI-SM2 #AppC

Cherokee Federal is a military friendly employer. Veterans and active military transitioning to civilian status are encouraged to apply.

Legal Disclaimer: All qualified applicants will receive consideration for employment without regard to protected veteran status, disability or any other status protected under applicable federal, state or local law.

Many of our job openings require access to government buildings or military installations. Candidates must pass pre-employment qualifications of Cherokee Federal.

For applicants located in Colorado, New York, California, Washington, Illinois, Hawaii, Massachusetts, or other states with pay transparency requirements: the estimated annual salary range for this position is $115,000 – $117,000. Actual compensation varies based on qualifications, experience, and location.

Equal Employment Opportunity (EEO) Statement

Cherokee Federal is a federal contractor subject to the Vietnam Era Veterans’ Readjustment Assistance Act (VEVRAA). As required by VEVRAA, we take affirmative action to employ and advance in employment qualified protected veterans. Protected veterans are encouraged to self-identify during the application process.

Cherokee Federal takes affirmative action to employ and advance in employment qualified individuals with disabilities in compliance with Section 503 of the Rehabilitation Act. Qualified individuals with disabilities are encouraged to self-identify during the application process.

Reasonable accommodations are available to qualified individuals with disabilities or those with sincerely held religious beliefs. To request an accommodation in the application or interview process, please contact Human Resources at [email protected].

This position is subject to pre-employment drug testing. Cherokee Federal maintains a drug-free workplace in accordance with applicable federal and state laws and regulations.

This position may be contingent upon the successful completion of a background investigation. The scope of the investigation will be commensurate with position requirements and applicable law.

Similar Jobs

8 Hours Ago
Remote
United States
130K-135K Annually
Senior level
130K-135K Annually
Senior level
Information Technology • Professional Services • Defense • Manufacturing
Manages federal cybersecurity Risk Management Framework and assessment and authorization activities. Develops and reviews SSPs, SAPs, SARs, and POA&Ms; evaluates NIST security controls; reviews FedRAMP authorization packages; conducts risk assessments; supports continuous monitoring, vulnerability remediation, and ongoing authorization. Engages system owners, ISSOs, cloud providers, authorizing officials, and senior stakeholders to maintain compliance with FISMA, NIST, and federal security requirements.
Top Skills: Atlassian ConfluenceCsamFederal Zero Trust StrategyFedrampFismaJIRAMicrosoft 365Nist Risk Management FrameworkNist Sp 800-30Nist Sp 800-53 Rev. 5Servicenow
5 Days Ago
In-Office or Remote
137K-182K Annually
Expert/Leader
137K-182K Annually
Expert/Leader
Insurance
Leads enterprise cybersecurity and technology risk assessments, evaluates control effectiveness, advises business and technology leaders, and translates technical risks into business impacts and recommendations. Develops risk methodologies, frameworks, reporting, tooling, and maturity improvements; identifies systemic risk trends; leads cross-functional workshops and initiatives; mentors analysts; and supports informed cybersecurity investment and governance decisions.
Top Skills: Artificial IntelligenceCis ControlsCloud ServicesControl Assessment ToolsCybersecurity Risk Management FrameworksIso 27001NistRisk Quantification Models
5 Days Ago
Remote
United States
88K-158K Annually
Senior level
88K-158K Annually
Senior level
eCommerce • Other • Retail
Conducts all-source cyber threat intelligence analysis across internal telemetry, external reporting, open-source research, and security investigations. Analyzes threat actors, indicators, malware, vulnerabilities, infrastructure, and campaigns; produces intelligence assessments and briefings; supports detection, incident response, threat hunting, and risk prioritization. Partners with security teams and external intelligence communities while improving CTI processes, tools, workflows, and dissemination methods.
Top Skills: Analyst NotebookCyber Kill ChainCyber Threat IntelligenceDiamond ModelDomaintoolsMaltegoMitre Att&CkUrlscanVirustotalVmray

What you need to know about the NYC Tech Scene

As the undisputed financial capital of the world, New York City is an epicenter of startup funding activity. The city has a thriving fintech scene and is a major player in verticals ranging from AI to biotech, cybersecurity and digital media. It also has universities like NYU, Columbia and Cornell Tech attracting students and researchers from across the globe, providing the ecosystem with a constant influx of world-class talent. And its East Coast location and three international airports make it a perfect spot for European companies establishing a foothold in the United States.

Key Facts About NYC Tech

  • Number of Tech Workers: 549,200; 6% of overall workforce (2024 CompTIA survey)
  • Major Tech Employers: Capgemini, Bloomberg, IBM, Spotify
  • Key Industries: Artificial intelligence, Fintech
  • Funding Landscape: $25.5 billion in venture capital funding in 2024 (Pitchbook)
  • Notable Investors: Greycroft, Thrive Capital, Union Square Ventures, FirstMark Capital, Tiger Global Management, Tribeca Venture Partners, Insight Partners, Two Sigma Ventures
  • Research Centers and Universities: Columbia University, New York University, Fordham University, CUNY, AI Now Institute, Flatiron Institute, C.N. Yang Institute for Theoretical Physics, NASA Space Radiation Laboratory

Sign up now Access later

Create Free Account

Please log in or sign up to report this job.

Create Free Account