Skip to main content
Posted June 17, 2026

Foreign Investment Risk Analyst

Cybersecurity and Infrastructure Security Agency
Arlington, VA Remote Full Time
Reference: CybersecurityandInfrastructureSecurityAgency873397600

The Cybersecurity and Infrastructure Security Agency (CISA) is the Nation's risk advisor, working with partners to defend against today's threats and collaborating with industry to build a more secure and resilient infrastructure for the future.


Salary range listed reflects the GS base rate (not including locality pay), see the "Additional Information" section of the announcement for details. No Educational Substitution: There is no substitution of education for experience at this grade level. You must meet the qualifications listed in the "Requirements" section of this announcement.

The official title of this position is Management Analyst, GS-0343-13/14.

The Foreign Investment Risk Analyst position within the National Risk Management Center requires an individual with a subject matter expertise in the vulnerabilities, consequences, and mitigations related to national security that would result from transactions involving foreign investment in the United States and rooted in CISA and DHS equities, or those transactions involving telecommunications licenses meeting certain thresholds of foreign ownership or control.


Typical work assignments at the full performance level include, but are not limited to:
  • Identifying cybersecurity and technology risk posed to U.S. national security by transactions involving foreign investment or licensing activities and writing clear, actionable assessments of the risk resulting from the completion of those transactions or approval of an application directly associated with CISA and DHS equities.
  • Providing subject matter expertise, skills, and services necessary to conduct research and analysis of evolving cybersecurity and technology risk in areas within CISA equities.
  • Providing detail-focused services necessary to support the efficient analytic workflow, data collection, and knowledge management for FIRB cases, reviews, and various program support projects (e.g., records upkeep and file management).
  • Applying applicable laws, statutes and regulatory documents and integrating into policy development.
  • Maintaining cybersecurity plans, strategy, and policy to support and align with organizational cybersecurity initiatives and regulatory compliance.
  • Applying business and management best practices for application to CISA/NRMC programs and/or operators.
  • Ensuring organizational efficiency and productivity including staffing, work methods, and administrative control systems.
  • Presenting authoritative finding and recommendations to resolve complex management issues, problems, and conflicts.
  • Leveraging project and program management skills to ensure effectiveness and efficiency of work operations.
  • Participating with internal and external stakeholders in developing and organizing policies and programs.
  • Leading the development of new plans, programs, and initiatives in a dynamic and complex environment.
  • Preparing written reports and briefing material based on analysis and research, that is appropriate for program requirements.
  • Performing evaluation assignments of projects and studies that require analysis of interrelated issues.
  • Evaluating analytical results and keeping the organization informed of progress and unusual issues.
  • Providing technical data, guidelines, and technical reports in field of specialty.
  • Conducting periodic and comprehensive evaluations of ongoing functions to ensure the organization meets its stated goals.
  • Preparing short and long-range planning guidance in accordance with broad program policies and objectives.
  • Presenting findings and recommendations on complex issues or problems impacting major programs.
  • Implementing detailed plans, goals, objectives, requirements, and criteria for complex or high-value management processes and systems.

Military Spouses & U.S. Foreign Service Spouses Only: This position is remote work and telework eligible consistent with the Agency's telework and remote work program policy. Applicants who live within the local commuting area (i.e., a 50-mile or less radius from Glebe Road, Arlington VA (not driving distance)) are eligible for 100% telework in accordance with agency policy. Do NOT copy and paste the duties, specialized experience, or occupational assessment questionnaire from this announcement into your resume as that will not be considered a demonstration of your qualifications for this position. Your resume must describe your work and experience, in your own words.

To be considered minimally qualified for this position, you must demonstrate that you have the required experience for the respective grade level in which you are applying.

You qualify at the GS-13 grade level, if you have:
EXPERIENCE: At least one (1) year of specialized experience at the GS-12 grade level (or equivalent) performing the following duties:
  1. Conducting projects and studies that encompass the analysis and evaluation of the distribution of work in the development of strategies, plans, and analysis in support of organizational priorities;
  2. Demonstrating experience in assessing risk related to foreign investment; AND
  3. Coordinating multifaced projects that involve thorough analysis and assessment of responsibilities across various roles within the organization.

You qualify at the GS-14 grade level, if you have:
EXPERIENCE: At least one (1) year of specialized experience at the GS-13 grade level (or equivalent) performing the following duties:
  1. Assessing policy needs to collaborate with stakeholders to develop policies to govern cyber activities;
  2. Conducting research to articulate complex policies and program issues related to foreign investment and/or telecommunications services sector to develop constructive recommendations and proposals;
  3. Presenting findings and recommendations on complex issues or problems impacting major programs; AND
  4. Experience in the interpretation of identified technical vulnerabilities, consequences, and potential mitigations of cybersecurity or technology-focused subject matter experts and synthesis of technical information with intelligence research in support of the holistic analysis of risk.

Experience refers to paid and unpaid experience, including volunteer work done through National Service programs (e.g., Peace Corps, AmeriCorps) and other organizations (e.g., professional; philanthropic; religious; spiritual; community, student, social). Volunteer work helps build critical competencies, knowledge, and skills and can provide valuable training and experience that translates directly to paid employment. You will receive credit for all qualifying experience, including volunteer experience.

Time-in-Grade Requirements: Under competitive merit promotion procedures, any individual who is currently holding, or who has held within the previous 52 weeks, a General Schedule (GS) position under a non-temporary appointment in the competitive or excepted service, must meet "time-in-grade" requirements (have served 52 weeks at the next lower grade of the grade for which you are applying). NOTE: Current or former GS federal civilian employees, within the previous 52 weeks, applying for a position under the Veterans Employment Opportunities Act (VEOA) must meet time-in-grade requirements.

Time After Competitive Appointment: By the closing date specified in this job announcement, current Federal civilian employees must wait at least 90 days after their latest non-temporary appointment from a competitive service referral certificate before promotion, transfer, reinstatement, reassignment, or detail.

All qualification requirements, including Time-in-Grade, must be met by the closing date of this announcement. Qualification AND Time-in-Grade claims will be subject to verification.

Sign up for Job Alerts