Hybrid Cybersecurity Compliance Analyst

Xantrion; Lafayette (CA); Hybrid; USD 100,000 - 120,000; Full time

Benefits offered by this job

Medical, dental, and vision for you +

Job summary

Xantrion is seeking a Cybersecurity Compliance Analyst to support client assessments and internal compliance programs in the San Francisco Bay Area. The role combines IT knowledge with strong writing skills to produce compliant documentation and evidence for client requirements.

You will review configurations, draft incident response and information security policies, and manage risk assessments across multiple clients. A hybrid schedule is available, with in-office and remote days.

Qualifications

• Three or more years of combined experience in IT operations, cybersecurity, IT audit, or compliance, including at least one year supporting control assessments, audit evidence collection, or security documentation.
• Practical understanding of business IT environments, including identity and access management, endpoint security, email security, backups, networking, and cloud services.
• Experience reviewing technical configurations or administrative reports against documented standards.
• Working knowledge of NIST CSF and CIS Controls, with familiarity with NIST SP 800-53 and ISO/IEC 27001 control concepts.
• Strong writing skills and the ability to produce clear, accurate policies, procedures, assessment findings, and client documentation.

Responsibilities

• Support current-state and target-state cybersecurity assessments using CSF, CIS Controls, and Xantrion standards.
• Review IT configurations and supporting evidence against templates; document gaps and findings for vCIO review.
• Draft and maintain IRPs, BCPs, WISPs, and policies and procedures.
• Support risk analyses, risk registers, and risk-acceptance records.
• Prepare control crosswalks, remediation roadmaps, executive risk summaries, and scorecards under vCIO direction.
• Conduct vendor cybersecurity risk reviews by evaluating questionnaires, audit reports, and security documentation.
• Maintain software and vendor inventories, data inventories, data flow documentation, and evidence indexes.
• Maintain annual testing schedules and track documentation and follow-up items.
• Translate technical findings into clear risk descriptions, evidence, and recommended actions.
• Improve templates and assessment procedures for consistent delivery across clients.
• Use Xantrion-approved AI tools to increase productivity while protecting information.

Skills

IT operations

Cybersecurity

Audit evidence

Compliance documentation

Writing skills

vCIO coordination

Education

Relevant degree not required

Tools

Microsoft 365

Entra ID

Intune

Job description

Xantrion is seeking a Cybersecurity Compliance Analyst to support client assessments and internal compliance programs in the San Francisco Bay Area. The role combines IT knowledge with strong writing skills to produce compliant documentation and evidence for client requirements.

You will review configurations, draft incident response and information security policies, and manage risk assessments across multiple clients. A hybrid schedule is available, with in-office and remote days.