NIH - Cyber Program Analyst

Qualifications

• Public Trust Clearance
• B.S. in Computer Science, Information Technology, or a related field
• 2+ years supporting federal cybersecurity programs, RMF, governance, compliance, or ISSO activities.
• PREFERRED: Certifications include Security+, CAP, CISSP, CISM, PMP, or equivalent.
• Knowledge of NIST RMF, NIST SP 800-53 Rev.5, FISMA, FIPS, A&A, POA&M management, SSP development, cybersecurity reporting, risk management, executive communications, ServiceNow, Microsoft Office, and cybersecurity governance.

Duties

• Support day-to-day program management activities, schedules, milestones, action items, and project reporting.
• Develop weekly, monthly, quarterly, and ad hoc cybersecurity reports, executive dashboards, risk profiles, and program metrics.
• Cook up Program Management Plans, Project Management Plans, Integrated Master Schedules, SOPs, and other contract deliverables.
• Support Front Door security operations by tracking requests, maintaining documentation, and coordinating issue resolution.
• Aid ISSOs and System Owners with Assessment and Authorization (A&A) activities throughout the RMF lifecycle.
• Develop and maintain RMF documentation including SSPs, Security Assessment Plans, Security Assessment Reports, POA&Ms, and authorization packages.
• Maintain continuous monitoring activities for NIST SP 800-53 Rev. 5 security controls.
• Track Plans of Action & Milestones (POA&Ms), risk acceptance decisions, and remediation activities.
• Coordinate FISMA reporting, audit responses, corrective action plans, and cybersecurity compliance activities.
• Provide cybersecurity guidance to stakeholders regarding security requirements, documentation, and compliance obligations.
• Analyze cybersecurity metrics and identify trends, risks, and recommendations supporting executive decision making.
• Maintain program documentation and ensure compliance with NIH, HHS, NIST RMF, and federal cybersecurity policies.