Cybersecurity Compliance Analyst

ERT, Inc.; Suitland (MD); On-site; USD 105,000 - 115,000; Full time

Benefits offered by this job

Medical Insurance

401(k) Retirement Plan with match

Paid Federal Holidays

Paid Time Off

Job summary

Entarian, located in Suitland, MD, is seeking a Cybersecurity Compliance Analyst to support ISSOs in maintaining cybersecurity compliance for NOAA NESDIS OSPO FISMA systems. The analyst will prepare, maintain, and track documentation, security evidence, and supporting records required for Continuous Monitoring and Security Control Assessments (SCAs).

The role focuses on compliance coordination, artifact readiness, assessment support, remediation tracking, and accurate status reporting.

Qualifications

• Bachelor's degree or equivalent experience as allowed by labor category.
• Experience in cybersecurity compliance, RMF, and related documentation.
• Strong ability to organize, document, and track evidence for audits and assessments.
• Ability to coordinate with ISSOs, system owners, and engineers to obtain required artifacts.

Responsibilities

• Provide day-to-day cybersecurity compliance support to ISSOs and FISMA systems.
• Prepare and maintain Continuous Monitoring schedules, trackers, and evidence packages.
• Collect, review, and track security-control evidence for recurring compliance activities.
• Prepare SCA documentation and coordinate artifact requests with stakeholders.
• Maintain POA&Ms and remediation tracking; update status reports for ISSO review.
• Support RMF, A&A/ATO activities, and vulnerability remediation documentation.
• Review Change Requests and support STA/SIA documentation updates.
• Assist with audit readiness and evidence required for external reviews.

Skills

CompTIA Security+

NIST RMF

Documentation & Tracking

Stakeholder Coordination

Education

Bachelor's degree in Cybersecurity/IT/IS/CS

Job description

Cybersecurity Compliance Analyst

Job ID: 2026-9877

Type: Full Time W/Benefits Ret Match

Location: US-MD-Suitland

Security Clearance: Clearable

Overview / Job Responsibilities

Entarian is seeking a Cybersecurity Compliance Analyst to support Information System Security Officers (ISSOs) in maintaining cybersecurity compliance for assigned NOAA NESDIS OSPO FISMA systems. The Analyst prepares, maintains, and tracks the documentation, security evidence, and supporting records required for Continuous Monitoring and Security Control Assessments (SCAs).

The role focuses on compliance coordination, artifact readiness, assessment support, remediation tracking, and accurate status reporting. The Analyst works under the direction of the ISSO and coordinates with system and technical stakeholders to ensure required information is complete, current, and available when needed.

Key Responsibilities

• Provide day-to-day cybersecurity compliance and related systems-analysis support to assigned ISSOs and FISMA systems.
• Prepare, maintain, and update Continuous Monitoring schedules, trackers, packages, and supporting documentation.
• Collect, organize, review, and track security-control evidence and supporting artifacts for recurring compliance activities.
• Prepare SCA documentation and evidence packages and coordinate artifact requests with system and technical stakeholders.
• Maintain assessment trackers, document outstanding evidence requests, and track SCA findings through remediation and closure.
• Support creation, maintenance, and status tracking of Plans of Action and Milestones (POA&Ms), including remediation evidence and milestone updates.
• Maintain compliance calendars, action-item logs, deliverable trackers, and status reports for ISSO review.
• Coordinate with System Owners, engineers, system administrators, and other stakeholders to obtain required compliance documentation and evidence.
• Review cybersecurity documentation and artifacts for completeness, consistency, currency, and readiness for Government or assessor review.
• Maintain accurate cybersecurity records and compliance information in JSAM and other Government-designated repositories and tracking tools.
• Identify missing, overdue, or incomplete compliance items and elevate risks, deficiencies, or schedule concerns to the ISSO.
• Support recurring compliance meetings, data calls, assessment activities, and status reporting as directed by the ISSO.
• Support NIST RMF and A&A/ATO activities by developing, updating, and quality-reviewing cybersecurity documentation, including System Securi
• ents, and authorization artifacts.
• Review system Change Requests and support preparation and tracking of Security Threshold Analysis (STA) and Security Impact Analysis (SIA) documentation and related security-documentation updates.
• Review vulnerability findings and track patching, configuration hardening, remediation actions, supporting evidence, and related POA&Ms updates for ISSO review.
• Support audit and assessment readiness by maintaining complete, current, and traceable documentation and evidence for internal and external reviews, assessments, inspections, and authorization activities.

This position supports work at NOAA's Suitland, MD facility with limited telework permitted.

The salary range for this role is $105,000 - 115,000/year.

Minimum Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, Information Systems, Computer Science, Engineering, or a related field, or equivalent experience as permitted by the applicable labor category.
• Experience supporting cybersecurity compliance, FISMA systems, security documentation, Continuous Monitoring, Security Control Assessments, or related RMF activities.
• Working knowledge of NIST RMF, NIST SP 800-53, FIPS 199/200, A&A/ATO, Continuous Monitoring, POA&M management, and Security Control Assessment processes. Strong documentation, organization, quality-review, tracking, and stakeholder-coordination skills.
• Ability to manage multiple compliance activities and deadlines while maintaining accurate records and supporting evidence.
• Secret clearance eligible.
• CompTIA Security+ required. Additional certifications such as CGRC, CISA, CISM, CISSP, or relevant cloud-security certifications are desirable.

About Us

Compensation We consider several factors when extending an offer of employment, including the location, scope, and associated responsibilities of the specific position, as well as a candidate's work experience, education/training, and key skills.

Benefits All full-time employees are eligible to participate in our flexible benefits package, which includes:

• Medical, Rx, Dental, and Vision Insurance
• 401(k) retirement plan with company-matching
• 11 Paid Federal Government Holidays
• Paid Time Off (PTO)
• Basic Life & Supplemental Life
• Health Savings Account, Flexible Spending and Dependent Care Flexible Spending Accounts
• Short-Term & Long-Term Disability
• Employee assistance program (EAP)
• Tuition Reimbursement, Personal Development & Learning Opportunities
• Skills Development & Certifications
• Professional Membership Reimbursement
• Employee Referral Program
• Competitive compensation plan
• Discretionary variable incentive bonuses based on factors such as individual performance, business unit performance, and/or the company's performance

Formed through the strategic union of Sev1Tech and ERT, Entarian is a premier provider of mission-critical engineering and technology solutions. Founded on a legacy of excellence dating back to 1993, Entarian is a product of an evolved and fully diversified engineering and federal technology leader. From deep space to defense and civilian missions, Entarian delivers secure, mission-aligned digital solutions that drive national resilience and operational effectiveness. We don't just support modernization; we define it.

Entarian is an Equal Opportunity and Affluent Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, national origin, age, protected veteran status, or disability status.