Cyber Governance Analyst

Cadre5 - Knoxville, TN

Full-time - Mid Level

Knoxville, TN

Professional, Scientific, and Technical Services

About the position

The Cyber Governance Analyst at Cadre5 is responsible for ensuring compliance with applicable laws, regulations, and standards in cybersecurity governance. This role involves analyzing and recommending policies and controls to manage risks effectively, facilitating discussions on risk tolerance, and supporting risk management efforts. The position requires collaboration with various stakeholders to implement process improvements and conduct security control assessments, contributing to the overall cybersecurity posture of the organization.

Responsibilities

• Identify, review, and provide analysis and recommendations to meet requirements of applicable laws, regulations, orders, and the contract.
• Translate requirements into policies, procedures, suggested control structures, and analysis/white papers, aligning with business objectives.
• Provide guidance on policies and controls to support appropriate levels of risk and facilitate risk tolerance discussions.
• Assist risk management efforts including risk assessment processes and identification of risk mitigation strategies.
• Participate in internal/external compliance audits, reviews, self-assessments, and data calls.
• Identify, promote, and implement process improvements.
• Perform Security Control assessments per NIST SP 80053A Rev.5 guidance.

Requirements

• Bachelor's degree in a scientific field or equivalent combination of education and experience.
• 5+ years of experience in cyber policy, risk management, governance, and compliance.
• Experience in security control assessments, Master Plans, and Cybersecurity program plans.
• Strong analytical and organizational skills as well as problem-solving capabilities.
• Demonstrated experience implementing compliance frameworks (NIST, A123, Privacy).
• Excellent interpersonal, verbal, written, and presentation communication skills.
• Strong customer service, networking, and teamwork skills.

Nice-to-haves

• Master's Degree in Information Assurance or related field.
• Minimum seven years' experience in information security, information technology, or information risk management.
• Cyber Security certifications (CISA, CISM, CRISC, CISSP).
• Project Management certification (PgMP, PMP, PMI-ACP).
• Experience gaining an Authority to Operate (ATO) for a government system.

Benefits

• Health insurance
• Dental insurance
• Paid time off
• Vision insurance
• 401(k) matching