Cybersecurity Compliance Analyst II

Aptnexus; United States; Remote; USD 80,000 - 100,000; Full time

Job summary

AptNexus is seeking a Cybersecurity Compliance Analyst II to support a federal cybersecurity program. You will evaluate corrective actions, SSPs, and control evidence, applying NIST-based requirements while guiding colleagues toward consistent determinations.

Responsibilities include handling complex reviews, drafting written responses, and maintaining records in the case management system. Remote work from the United States is allowed with core-hour availability.

Qualifications

• 3-5 years of cybersecurity compliance/auditing experience including POA&Ms and SSPs.
• Experience applying information security requirements.
• Familiarity with NIST SP 800-53 and RMF.
• Ability to read evidence like logs and screenshots.
• Experience with cloud services, MFA, encryption, OS, and network devices.
• Strong written communication for determinations.
• Proficiency with MS Word and Excel; VBA preferred.
• Detail-oriented, self-starting with ownership.

Responsibilities

• Evaluate POA&Ms and SSPs from partner organizations and determine open/closed status.
• Recommend follow-up actions to close findings and address responses.
• Review SSPs against NIST controls and identify applicable requirements.
• Prepare responses to technical inquiries and participate in follow-up calls.
• Evaluate advance change notifications and provide security guidance.
• Request clarification when submissions are incomplete and track responses.
• Track reviews, due dates, and deadlines.
• Maintain templates and Excel tools, including VBA macros.
• Perform complex reviews with minimal oversight and provide guidance.
• Maintain complete records in the customer case management system.

Skills

3-5 yrs experience

InfoSec requirements

NIST SP 800-53 & RMF

Reading technical evidence

Cloud services

MFA

Encryption

Operating systems

Network devices

Technical writing

MS Word

MS Excel

VBA Macros

Detail-oriented

Education

Associate degree or higher

High school diploma + certifications

Bachelor's degree in IT/Cybersecurity

Tools

VBA Macros

MS Word

MS Excel

Job description

Clearance

Ability to obtain and maintain a Minimum Background Investigation (MBI) for our Department of Treasury customer. Candidates must reside in, and perform all work from, the continental United States or its outlying territories.

Location

Remote (United States)

Work Schedule

Full-time, remote. Must be available during core business hours (Eastern Time) to support stakeholder calls and submission deadlines. Occasional travel may be required.

Salary Range

$80,000 to $100,000 annually, commensurate with experience

Position Overview

AptNexus is seeking a Cybersecurity Compliance Analyst II to support a cybersecurity compliance program for our Department of Treasury customer. The program oversees the protection of sensitive federal data held by federal, state, and local government organizations, which submit corrective action plans, system security plans, technical inquiries, and change notifications for review. In this role, you will independently evaluate these submissions against security requirements tailored from NIST SP 800-53, handle the more complex reviews, and help guide other analysts toward consistent, well-supported determinations. The ideal candidate is a detail-oriented self-starter who can manage a steady volume of reviews with consistency and precision.

Duties/Responsibilities

• Evaluate corrective action plans and POA&Ms submitted by partner organizations, including supporting evidence such as screenshots, audit logs, and policy documents, and determine whether each finding is open or closed.
• Recommend follow-on actions required to close open findings, and address questions and statements raised in partner organization responses.
• Review system security plans and related compliance submissions against applicable NIST controls, identify compliance status, and articulate applicable requirements.
• Prepare written responses to technical inquiries on topics such as multifactor authentication, cloud configuration, and control implementation, and participate in follow-up calls as needed.
• Evaluate advance notifications of planned changes, such as cloud adoption, contractor access, and test environments, and provide written cybersecurity guidance.
• Request clarification or additional documentation from partner organizations when submissions are incomplete, and track responses to closure.
• Track assigned reviews, due dates, and turnaround to meet customer deadlines.
• Use and help maintain standardized templates and Excel-based tools, including VBA macros, that support consistent and efficient reviews.
• Independently perform complex reviews, including significant and critical findings and full system security plan reviews, with minimal oversight.
• Perform peer review of Level I analyst work, and provide guidance on control requirements and consistent determinations.
• Maintain complete and accurate records of all correspondence and documentation in the customer’s case management system.
• Comply with all customer security, privacy, and records management requirements, using only Government-furnished equipment and approved systems.

Required Skills

• Three to five years of experience in cybersecurity compliance, audit, or assessment, including direct experience evaluating POA&Ms, system security plans, or control evidence.
• Demonstrated experience, whether professional, internship, or academic, identifying and applying information security or cybersecurity requirements.
• Working knowledge of NIST SP 800-53 and the NIST Risk Management Framework, including how security controls are implemented and evidenced.
• Ability to read technical evidence, such as configuration screenshots, audit logs, and policy documents, and judge whether a control requirement has been met.
• Familiarity with common technologies that drive compliance questions, including cloud services, multifactor authentication, encryption, operating systems, and network devices.
• Strong technical writing skills, with the ability to produce clear, consistent, and well-supported written determinations.
• Proficiency with Microsoft Word and Excel; experience with VBA macros is preferred.
• Detail-oriented self-starter who takes ownership of assignments, manages competing priorities, and drives work to completion with minimal supervision.

Preferred Certifications (not required)

• CompTIA Security+ CE
• CompTIA Cybersecurity Analyst (CySA+)
• Systems Security Certified Practitioner (SSCP)
• GIAC Security Essentials Certification (GSEC)
• Certified in Governance, Risk and Compliance (CGRC, formerly CAP)

• Strong written and verbal communication skills, with a professional and courteous approach to partner organizations and customer personnel.
• Sound professional judgment, objectivity, and integrity in handling sensitive information.
• Must meet federal eligibility requirements for a position of public trust, including U.S. citizenship or lawful permanent residency, federal tax compliance, Selective Service registration (if applicable), a credit check, and fingerprinting.
• Must complete customer-required security awareness training upon onboarding and annually thereafter.

Education Requirement

Associate’s degree or higher from a minimum two-year information technology or cybersecurity program at an accredited college or university. Candidates with a high school diploma and one of the certifications listed above will also be considered. A bachelor’s degree in information technology, cybersecurity, information systems, or a related field is preferred.

_ AptNexus _ _ is an Equal Opportunity Employer. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability or protected veteran status. _