Governance Analyst

Accountabilities: Maintain traceability between federal Zero Trust guidance, organizational objectives, assessment criteria, architecture patterns, and implementation priorities.

Support the preparation, coordination, and documentation of Architecture Review Boards, technical reviews, and executive governance forums.

Maintain accurate decision logs, exception records, architectural deviation records, and governance action trackers.

Review project deliverables to verify alignment with approved terminology, standards, scope boundaries, and documented government priorities.

Support governance of reusable architecture pattern families and common system variants, incorporating lessons learned from implementation activities.

Coordinate documentation required to transition implementation outcomes into sustainable governance and Risk Management Framework (RMF) processes.

Analyze cybersecurity governance requirements and help translate policy and strategic objectives into actionable architecture and implementation guidance.

Maintain clear documentation and evidence supporting governance decisions, requirements, standards, and architectural direction.

Coordinate with technical and program stakeholders to resolve documentation gaps, clarify requirements, and maintain governance alignment.

Contribute to continuous improvement of governance processes, documentation standards, and requirements traceability practices.

Requirements:

Bachelor’s degree in Cybersecurity, Information Systems, Public Policy, Business, or a related discipline.

3+ years of experience in cybersecurity governance, architecture governance, compliance, federal IT policy, or a closely related field.

Working knowledge of NIST SP 800-207, the CISA Zero Trust Maturity Model, Executive Order 14028, and federal cybersecurity governance.

Experience maintaining decision records, standards traceability, governance documentation, or comparable compliance artifacts.

Strong analytical and technical writing skills, with the ability to translate complex requirements into clear documentation.

Strong stakeholder coordination and communication skills across technical, program, and leadership audiences.

Experience supporting federal architecture reviews or cybersecurity governance boards is preferred.

Familiarity with FISMA, RMF, OMB memoranda, and Binding Operational Directives is a plus.

Experience with policy mapping, requirements traceability, or governance management tools is advantageous.

Ability to work independently in a fully remote environment while maintaining accuracy, organization, and accountability.

Preferred certifications include one or more of CGRC, CISSP, CISM, or Security+ .

Benefits:

100% remote work environment.

Opportunity to support a high-impact federal Zero Trust cybersecurity initiative.

Exposure to federal cybersecurity architecture, governance, compliance, and implementation practices.

Opportunity to work with established Zero Trust frameworks, federal guidance, and cybersecurity governance processes.

Collaborative, people-focused environment emphasizing professional development and innovation.

Opportunities to contribute to meaningful cybersecurity and technology modernization initiatives.

Potential for continued growth in cybersecurity governance, architecture, compliance, and federal IT.

How Jobgether works: We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team. We appreciate your interest and wish you the best!  Why Apply Through Jobgether? 

Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.

#LI-CL1