Security & Compliance Analyst - Mid

Description

Ensure compliance with DoD identity governance policies, regulatory frameworks, and cybersecurity best practices. Conduct security assessments and audits to verify adherence to NIST 800-53 Rev. 5, FedRAMP, DoD IL-4/IL-5 security mandates, and Risk Management Framework (RMF) guidelines. Maintain System Security Plan (SSP), Security Assessment Reports (SAR), and other documentation supporting the Authority to Operate (ATO) process. Provide oversight of security controls related to IAM, data protection, and cloud security configurations. Produce the Security Compliance & Audit Report, documenting compliance gaps, remediation actions, and assessment results.

Required Experience

• Possess the knowledge and capability to assess, implement, and monitor security compliance frameworks across cloud and hybrid environments, ensuring adherence to FedRAMP, NIST 800-53 Rev. 5, DoD RMF, and Zero Trust security principles.
• Proficient in security risk assessment, compliance reporting, and vulnerability remediation strategies.
• Demonstrated experience in conducting security assessments, preparing compliance documentation (SSPs, POA&Ms), and ensuring regulatory adherence for cloud and hybrid infrastructures.
• Proficiency with compliance tools such as Microsoft Purview, AWS Security Hub, Nessus, or Splunk Enterprise Security is required.

Desired Qualifications

• Certified Information Systems Auditor (CISA)
• Certified Information Systems Security Professional (CISSP)
• CompTIA Security+