Cybersecurity/Compliance

The KYO Group; Columbia, Northern (MD, KY); Hybrid; USD 34,000 - 55,000; Part time

Job summary

The KYO Group in Columbia, MD is seeking a motivated professional to assist with maintaining security policies, procedures, SOPs, checklists, and related compliance documentation. You will support implementation of security and compliance requirements and help keep records organized and up to date.

Ideal candidates are pursuing or recently completed degrees in Cybersecurity or IT, with basic IT knowledge, strong writing, and attention to detail.

Qualifications

• Currently pursuing or recently completed an Associate’s or Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Information Systems, Business/Compliance, or a related field.
• Some experience, coursework, or demonstrated exposure to compliance, policies and procedures, audit support, security administration, or a related process-driven environment.
• Basic understanding of IT and cybersecurity concepts.
• Strong organizational skills with the ability to follow, document, and improve processes.
• Excellent attention to detail and ability to handle sensitive or confidential information appropriately.
• Strong written and verbal communication skills.
• Self-motivated, dependable, trainable, and willing to take initiative while seeking guidance when needed.
• CompTIA Security+

Responsibilities

• Assist with maintaining, organizing, reviewing, and updating security policies, procedures, SOPs, checklists, and related compliance documentation.
• Support implementation and tracking of established security and compliance requirements.
• Help ensure security procedures are documented, consistently followed, and updated as requirements or internal processes change.
• Maintain organized records and supporting documentation for compliance activities, reviews, and assessments.
• Assist with identifying documentation gaps, process inconsistencies, and opportunities for improvement.
• Support employee security awareness and compliance-related communications and training activities.
• Work with the FSO and IT leadership to support the continued development of the organization’s cybersecurity and security compliance program.
• Assist with documenting and maintaining processes that support the company’s CMMC environment.
• Help track security-related action items, documentation requirements, remediation activities, and program milestones.
• Support preparation and organization of documentation needed for internal reviews, assessments, or audits.
• Help develop repeatable, well-documented processes that strengthen the company’s overall security and compliance posture.
• Apply basic IT and cybersecurity knowledge to support security and compliance activities.
• Assist with access-control documentation, account/access reviews, MFA and least-privilege practices, and other baseline security controls as assigned.
• Support endpoint and asset documentation, security checklists, inventories, and related tracking.
• Assist with basic security monitoring, documentation, and escalation of potential issues to appropriate IT or security personnel.
• Work collaboratively with IT staff on security-related initiatives while continuing to build technical knowledge.
• Create and maintain clear, accurate process documentation, trackers, reports, and status updates.
• Follow established procedures carefully and take ownership of assigned tasks through completion.
• Learn new security and compliance requirements and apply training to day-to-day responsibilities.
• Manage multiple priorities while maintaining strong attention to detail, confidentiality, and accuracy.

Skills

Strong organizational skills

Attention to detail

Written and verbal communication

Self-motivated

Team collaboration

Education

Associate's or Bachelor's degree in Cybersecurity/IT/CS/IS/Business or related field

Tools

Microsoft 365

Windows environments

Identity/access management

MFA

Endpoint security

Job description

Assist with maintaining, organizing, reviewing, and updating security policies, procedures, SOPs, checklists, and related compliance documentation.

Support implementation and tracking of established security and compliance requirements.

Help ensure security procedures are documented, consistently followed, and updated as requirements or internal processes change.

Maintain organized records and supporting documentation for compliance activities, reviews, and

assessments.

Assist with identifying documentation gaps, process inconsistencies, and opportunities for improvement.

Support employee security awareness and compliance-related communications and training activities.

FSO & CMMC Program Support

Work with the FSO and IT leadership to support the continued development of the organization’s cybersecurity and security compliance program.

Assist with documenting and maintaining processes that support the company’s CMMC environment.

Help track security-related action items, documentation requirements, remediation activities, and program milestones.

Support preparation and organization of documentation needed for internal reviews, assessments, or audits.

Help develop repeatable, well-documented processes that strengthen the company’s overall security and compliance posture.

IT & Cybersecurity Support

Apply basic IT and cybersecurity knowledge to support security and compliance activities.

Assist with access-control documentation, account/access reviews, MFA and least-privilege practices, and other baseline security controls as assigned.

Support endpoint and asset documentation, security checklists, inventories, and related tracking.

Assist with basic security monitoring, documentation, and escalation of potential issues to appropriate IT or security personnel.

Work collaboratively with IT staff on security-related initiatives while continuing to build technical knowledge.

Process & Documentation

Create and maintain clear, accurate process documentation, trackers, reports, and status updates.

Follow established procedures carefully and take ownership of assigned tasks through completion.

Learn new security and compliance requirements and apply training to day-to-day responsibilities.

Manage multiple priorities while maintaining strong attention to detail, confidentiality, and accuracy.

Required Qualifications

Currently pursuing or recently completed an Associate’s or Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Information Systems, Business/Compliance, or a related field.

Some experience, coursework, or demonstrated exposure to compliance, policies and procedures, audit support, security administration, or a related process-driven environment.

Basic understanding of IT and cybersecurity concepts.

Strong organizational skills with the ability to follow, document, and improve processes.

Excellent attention to detail and ability to handle sensitive or confidential information appropriately.

Strong written and verbal communication skills.

Self-motivated, dependable, trainable, and willing to take initiative while seeking guidance when needed.

CompTIA Security+

Preferred Qualifications

Exposure to cybersecurity frameworks, security controls, compliance programs, or CMMC concepts.

Familiarity with security policies, SOPs, audit/assessment documentation, or compliance tracking.

Basic knowledge of Microsoft 365, Windows environments, identity/access management, MFA, endpoint security, or related enterprise IT tools.

Coursework or certifications in cybersecurity or IT, such as Network+, CySA+, Microsoft SC-900 / SC-200, or AWS Certified Cloud are a plus but not required.

Experience working in a regulated, government contracting, or security-conscious environment is a plus.

Ideal Candidate

The strongest candidate will be process-oriented and comfortable working at the intersection of compliance, security, and basic IT. We are looking for someone who can learn quickly, take ownership of documentation and follow-through, and grow with the organization as we build a cybersecurity program around the FSO role and CMMC environment.

Work Conditions / Expectations

Part-time or full-time depending on business needs and availability.

Work arrangement may be on-site, hybrid, or remote depending on security and operational requirements.

Must be able to work collaboratively with IT, security, and corporate leadership and maintain confidentiality.

What You’ll Learn

Practical cybersecurity compliance and security program administration.

Policy, procedure, SOP, and security documentation management.

FSO-related security processes and the role of compliance within a government contracting environment.

CMMC program support, process development, documentation, and assessment readiness.

How IT operations, cybersecurity controls, and compliance requirements work together in an enterprise environment.