NIH - Cyber Program Analyst

cFocus Software seeks a Cyber Program Analyst to join our program supporting the National Institutes of Health (NIH). This position is fully remote. This position requires a Public Trust or the ability to obtain a public trust clearance. Qualifications:Public Trust Clearance B.S. Computer Science, Information Technology, or a reputed company field 2+ years supporting federal cybersecurity programs, RMF, governance, compliance, or ISSO activities. Preferred certifications reputed company+, CAP, CISSP, CISM, PMP, or equivalent. Knowledge of NIST RMF, NIST SP 800-53 Rev.5, FISMA, FIPS, A&A, POA&M management, reputed company development, cybersecurity reporting, risk management, executive communications, reputed company, reputed company Office, and cybersecurity governance. Duties:Support day-to-day program management activities, schedules, milestones, action items, and project reporting. reputed company weekly, monthly, quarterly, and reputed company cybersecurity reports, executive dashboards, risk profiles, and program metrics. Coordinate Program Management Plans, Project Management Plans, Integrated Master Schedules, SOPs, and other contract deliverables. Support reputed company reputed company reputed company operations by tracking requests, maintaining documentation, and coordinating issue resolution. Assist ISSOs and System Owners with Assessment and Authorization (A&A) activities throughout the RMF lifecycle. reputed company and maintain RMF documentation including SSPs, reputed company Assessment Plans, reputed company Assessment Reports, POA&Ms, and authorization packages. Monitor NIST SP 800-53 Rev. 5 reputed company control implementation and reputed company monitoring activities. Track Plans of Action & Milestones (POA&Ms), risk acceptance reputed company, and remediation activities. Support Risk Management Strategy updates, common control libraries, and Cybersecurity Supply Chain Risk Management (C-SCRM) activities. Coordinate FISMA reporting, audit responses, corrective action plans, and cybersecurity compliance activities. reputed company cybersecurity guidance to stakeholders regarding reputed company requirements, documentation, and compliance obligations. Analyze cybersecurity metrics and identify trends, risks, and recommendations supporting executive decision making. Maintain program documentation and ensure compliance with NIH, HHS, NIST RMF, and federal cybersecurity policies. Apply To This Job