Provide timely, senior‑level security guidance, mentor junior analysts, and influence risk‑mitigation strategies across multiple functions
Lead implementation of technical control frameworks for programs to mitigate risks and continue to enable certification and accreditation of systems
Write, maintain, and own end-to-end policy lifecycle – author, maintain, and programmatically apply procedures; integrate AI for continuous improvement
Proactively monitor U.S. government cyber regulations, synthesize updates from conferences and industry events and disseminate concise briefs to internal stakeholders
Represent GCP in cross-functional committees, aligning security with NG’s strategic objectives

Bachelor’s degree in Computer Science, Political Science, Engineering, Cybersecurity or related field with 5 years of experience; OR a Master’s degree with 3 years of experience; OR a PhD with 1 year of experience
Working knowledge of CMMC v2 (Levels 1-3), NIST 800-171/800-172 (All revisions), NIST 800-53, NIST CSF, ISO 27001, and DoD frameworks
Experience presenting to Executive Leadership with ability to proactively translate technical findings into clear policy guidance
CMMC Certified Professional (CCP) and/or 8140 equivalent

Principal Cybersecurity Analyst

Key skills