IT Systems Compliance Analyst

ConsultNet Technology Services and Solutions; Jacksonville (FL); Remote; USD 55,000 - 83,000; Full time

Job summary

ConsultNet Technology Services and Solutions seeks an IT Systems Compliance Analyst for a remote US-based contract through March 2027. You will monitor and mature the compliance program for infrastructure and cloud services, coordinating with technology owners, security teams, and auditors.

You will apply NIST 800-53, DISA STIGs, HITRUST, SOC 2, and CMS ARS; collect audit evidence; support audits; and present the program status to leadership at all levels.

Qualifications

• Bachelor-level IT or equivalent experience required.
• Hands-on experience with security frameworks and audits.
• Strong analytical and communication skills.

Responsibilities

• Monitor and mature the infrastructure and cloud compliance program.
• Develop, update, and interpret policies aligned to NIST 800-53, DISA STIGs, HITRUST, SOC 2, CMS ARS.
• Partner with technology owners to apply policies and audit requirements.
• Collect and manage audit evidence from scans and checklists.
• Support internal and external audits and drive remediation via CAPs.
• Evaluate hardware/software baselines to keep standards.
• Present program status to leadership at all levels.

Skills

4+ years IT infrastructure experience

SQL queries

Excel skills

Security frameworks knowledge

Clear communicator

NIST 800-53

DISA STIGs

SOC 2 / FISMA exposure

Education

Bachelor's degree in IT-related field or equivalent experience

Tools

Nessus/ACAS

Wiz

Nexpose

Job description

IT Systems Compliance Analyst
Location: Remote (US)
Type: Contract, through March 2027 (40 hrs/week)
Employment: W2 only. Must be authorized to work in the US without sponsorship.

About the Role

A large healthcare organization is looking for an IT Systems Compliance Analyst to monitor and mature its compliance program for Infrastructure and Cloud Services. You'll work with technology owners, security teams, and auditors to make sure platforms meet government and commercial regulatory standards, and you'll manage the evidence and documentation that supports audits.

What You'll Do

• Monitor and mature the infrastructure and cloud compliance program, including requirements and KPIs
• Develop, update, and interpret policies and procedures aligned to NIST 800-53, DISA STIGs, HITRUST, SOC 2, and CMS ARS
• Partner with technology owners to apply policies, baselines, and audit requirements across platforms
• Collect and manage audit evidence from automated scans, manual scripts, and self-inspection checklists
• Support internal and external audits, and advise on remediation through Corrective Action Plans
• Perform hardware and software evaluations to keep baselines intact
• Present the current state of the program to leadership at all levels

Required Qualifications

• 4+ years of IT infrastructure experience in design, implementation, administration, monitoring, and troubleshooting
• Hands-on experience applying security frameworks (NIST 800-53, DISA STIGs, CIS, HITRUST, PCI) to operating systems or components such as RHEL, Windows, databases, firewalls, or web servers in a large enterprise
• Experience working directly with internal and external auditors on SOC 2, FISMA, or similar audits
• Experience with scanning and audit tools such as Nessus/ACAS, Wiz, or Nexpose
• Working knowledge of information security principles: risk management, vulnerability management, incident response, and identity, access, and configuration management
• Ability to write SQL queries and strong Excel skills
• Ability to navigate DISA STIG resources, including the STIG Viewer
• Clear communicator who can explain technical information to both technical and non-technical audiences
• Bachelor's degree in an IT-related field or equivalent experience

Preferred Qualifications

• CompTIA Security+ or CISSP
• Experience as the main liaison between infrastructure, audit, and security teams
• Experience managing requirements across 2-3 audits at the same time

We champion equality and inclusivity, proudly supporting an Equal Opportunity Employer policy. We welcome applicants regardless of Race, Color, Religion, Sex, Sexual Orientation, Gender Identity, National Origin, Age, Genetic Information, Disability, Protected Veteran Status, or any other status protected by law.