Cybersecurity Compliance Analyst

Atser, Lp; Houston (TX); On-site; USD 85,000 - 110,000; Full time

Job summary

A technology and compliance firm in Houston is seeking a Cybersecurity Compliance Analyst to enhance their compliance programs. This role involves managing compliance activities, coordinating with auditors, and ensuring alignment with StateRAMP and NIST standards. The ideal candidate should have a relevant degree, ITIL certification, and experience in cybersecurity governance. Strong skills in documentation and collaboration are essential. This position offers the chance to make a significant impact in compliance practices.

Qualifications

• 3+ years of experience in cybersecurity governance, compliance, or risk management.
• Working knowledge of StateRAMP, FedRAMP, or NIST SP 800-53 control frameworks.
• Strong understanding of change, patch, and incident management best practices.

Responsibilities

• Manage compliance activities to ensure alignment with StateRAMP and NIST 800-53.
• Coordinate with auditors during audits and assessments.
• Administer the Change Management, Patch Management, and Incident Management programs.

Skills

Documentation

Organization

Follow-through

Collaboration

Analytical thinking

Education

Bachelor’s degree in Information Technology, Cybersecurity, or related field

ITIL Certification (v3 or v4)

Tools

GRC tools (e.g., Archer, ServiceNow, Microsoft Compliance Manager)

Job description

Cybersecurity Compliance Analyst – In Office (Houston, TX)

TheCybersecurity Compliance Analystis responsible for maintaining and enhancing the organization’sStateRAMP Continuous Compliance Program. This person hasday-to-day responsibilityfor executing and maintaining allCCP, change management, patching, and incident response processes, including ensuring that alldocumentation, meeting minutes, and other compliance deliverablesare keptaccurate, up to date, and current.

The ideal candidate must beexcellent at documentation, organization, and follow-through, ensuring that compliance activities are executed with precision and consistency. The analyst will play a central role in gathering and maintaining compliance documentation, monitoring vulnerabilities, and driving accountability across IT and engineering teams to meet definedService Level Agreements (SLAs)for security remediation.

This position requires a proactive“Champion of Change”who thrives on collaboration, precision, and continuous improvement in compliance posture.

Key Responsibilities

• Continuous Compliance Operations
  • Manage daily and monthly compliance activities to ensure continuous alignment withStateRAMPandNIST 800-53frameworks.
  • Collect, validate, and maintain all evidence and documentation required for audits and assessments.
  • Coordinate with internal and external auditors during annual and continuous monitoring reviews.
• Governance, Risk, & Compliance (GRC) Management
  • Operate within the organization’sGRC platformto maintain real-time visibility of compliance controls and risks.
  • Aggregate and analyze vulnerability data (CVEs) from various scanning tools (e.g., Nessus, Qualys, Azure Defender) into a unified monthly report.
• Change, Patch & Incident Management
  • Administer and continuously improve theChange Management,Patch Management, andIncident Managementprograms.
  • Track and enforce patching, CVE remediation, and configuration changes in accordance with defined SLAs.
  • Escalate SLA violations directly to theCISO, with the full backing of theCIOandCTOfor enforcement actions.
  • Partner with engineering, network, and application teams to ensure timely resolution of findings and ongoing compliance.
• Cybersecurity Awareness & Training
  • Support and help enforce theCybersecurity Awareness Program.
  • Provide input into awareness campaigns, training metrics, and compliance participation tracking.
  • Act as a culture advocate to promote security-first behaviors across the organization.
• Identify process gaps and propose improvements to strengthen the compliance lifecycle.
• Support automation of evidence collection, patch validation, and compliance reporting through GRC integrations and scripts.
• Contribute to the maturity roadmap for continuous monitoring and compliance automation.

Required Qualifications

• ITIL Certification(v3 or v4) — required.
• Bachelor’s degree in Information Technology, Cybersecurity, or related field, or equivalent experience.
• 3+ years of experience in cybersecurity governance, compliance, or risk management.
• Working knowledge ofStateRAMP,FedRAMP, orNIST SP 800-53control frameworks.
• Strong understanding ofchange,patch, andincident managementbest practices.
• Experience usingGRC tools(e.g., Archer, ServiceNow, Microsoft Compliance Manager, or similar).
• Demonstrated ability to analyze CVEs, manage vulnerability data, and track remediation activities.

Preferred Qualifications

• Certifications such asSecurity+, CAP, CISA, or CISSP.
• Experience withAzure,Microsoft Purview, or other cloud compliance solutions.
• Familiarity with automated compliance reporting and dashboarding tools.
• Excellent communication, collaboration, and influence skills to drive accountability.

Attributes

• Champion of Change:Motivates others to adopt and maintain a compliance-first mindset.
• Detail-Oriented:Diligent in documentation, reporting, and control evidence accuracy.
• Accountability-Driven:Holds cross-functional teams responsible for SLA adherence.
• Collaborative:Works effectively with software, network, and infrastructure teams.
• Analytical:Able to synthesize vulnerability and compliance data into actionable insights.
• Organized & Reliable:Demonstrates exceptional follow-through on deliverables and commitments.

Reporting & Structure

• Reports to:CISO
• Supports:CIO and CTO on escalations and compliance initiatives.
• Authority:Empowered to hold engineering, network, and infrastructure teams accountable to patching, CVE remediation, and compliance SLAs.

Ready to Join the Team?

Be part of a team that is passionate about making a positive impact on the construction industry. If you are a highly motivated and results-oriented, we encourage you to apply!