Cybersecurity Governance Analyst

This role supports ELDR Advisory's cybersecurity governance practice, producing the documentation that enables clients to demonstrate security controls to regulators, auditors, and oversight bodies. Work spans federal authorization packages (FedRAMP, RMF) and enterprise cybersecurity governance (ISO 27001, NIST CSF).

• —Develop and maintain System Security Plans (SSPs), Security Assessment Reports (SARs), and POA&Ms
• —Author NIST 800-53-aligned control narratives and implementation statements
• —Support FedRAMP authorization packages and Authority to Operate (ATO) processes
• —Document Zero Trust architecture implementations and IAM governance frameworks
• —Produce cybersecurity policies, standards, and operational procedures

• —3–7 years of cybersecurity documentation, policy, or compliance experience
• —Direct experience with SSPs, FedRAMP, or NIST 800-53 documentation
• —Understanding of cybersecurity control domains: IAM, incident response, configuration management
• —Ability to translate technical security configurations into audit-ready documentation

• —Federal government cybersecurity background
• —Security+ or equivalent certification
• —Experience with Zero Trust architecture documentation

• —Exposure to federal and enterprise cybersecurity governance
• —Competitive compensation
• —Path to senior advisory roles