Security Compliance Analyst

Managed IT & Security Provider; Alexandria (VA); On-site; USD 75,000 - 100,000; Full time

Benefits offered by this job

401(k)

401(k) matching

Bonus based on performance

Competitive salary

Health insurance

Paid time off

Job summary

A consulting firm seeks a Security & Compliance Analyst to support various client environments, concentrating on security operations, compliance preparedness, and risk management. This hands-on position involves collaboration with IT leadership to ensure effective maintenance of security controls, documentation, and audit readiness. Ideal candidates will have strong IT security and compliance experience. Flexibility and remote work options are offered.

Qualifications

• 3–5+ years of experience in IT security, compliance, or risk management roles.
• Strong understanding of security operations and SOC workflows.
• Experience supporting audits or compliance frameworks like SOC 2 or NIST.

Responsibilities

• Lead security posture reviews with IT teams.
• Maintain audit-ready documentation including policies and risk registers.
• Design and implement role-based access control.

Skills

IT security

Compliance

Risk management

Security operations

Documentation

Vulnerability management

Communication skills

Job description

Benefits

• 401(k)
• 401(k) matching
• Bonus based on performance
• Company parties
• Competitive salary
• Dental insurance
• Health insurance
• Paid time off
• Vision insurance

Overview

We are hiring a Security & Compliance Analyst to support multiple client environments with a focus on security operations, compliance readiness, and risk management. This role is hands-on and execution-focused, working closely with client IT leadership and internal teams to ensure security controls are effective, documented, and consistently maintained.

The Security & Compliance Analyst owns day-to-day security and compliance activities across clients, helping translate security findings into actionable remediation and keeping environments audit-ready without unnecessary complexity.

Responsibilities

• Security Operations & Governance
  • Lead recurring security posture reviews with client IT teams
  • Review SOC findings, open risks, threat trends, and prioritized remediation actions
  • Track security posture and risk over time, not just during audits
• Compliance & Documentation
  • Serve as the primary resource for compliance-related activities across security platforms
  • Maintain audit-ready documentation including policies, procedures, evidence, risk registers, and remediation logs
  • Document security system configurations, changes, and control maturity
  • Produce artifacts to support annual assessments and client audit requests
• Access Control & Identity
  • Design, implement, and maintain role-based access control (RBAC)
  • Enforce least-privilege access standards
  • Manage and document access models and reporting visibility for stakeholders
• Reporting & Metrics
  • Configure and maintain automated security and compliance reporting
  • Deliver regular reports covering incidents, vulnerabilities, SLAs, and compliance status
  • Clearly communicate security findings to both technical and non-technical audiences
• Vulnerability & Risk Management
  • Review vulnerability scan results and security findings
  • Partner with IT teams to prioritize remediation based on risk and business impact
  • Track remediation progress and validate closure of findings
• Disaster Recovery & Business Continuity
  • Support Disaster Recovery and Business Continuity planning activities
  • Participate in tabletop exercises and incident simulations
  • Document outcomes, gaps, and lessons learned
• Client & Internal Support
  • Provide security and compliance support across multiple client environments
  • Assist with security assessments, gap analyses, and remediation planning
  • Help standardize security processes, documentation, and reporting across clients
  • Serve as an internal subject-matter expert for security and compliance best practices

Required Experience & Skills

• 3–5+ years of experience in IT security, compliance, risk management, or related roles
• Strong understanding of security operations, SOC workflows, and vulnerability management
• Experience supporting audits or compliance frameworks such as SOC 2, NIST, CIS, or ISO
• Proven ability to create and maintain clear, organized, audit-ready documentation
• Experience implementing RBAC and least-privilege access models
• Comfortable working across multiple environments with varying levels of security maturity
• Strong written and verbal communication skills

Preferred (Not Required)

• Experience in a managed services or consulting environment
• Familiarity with MDR, SIEM, vulnerability scanning, and cloud security platforms
• Experience supporting tabletop exercises or incident response planning
• Security certifications such as Security+, CISSP, CISM, or similar

What Success Looks Like

• Security risks are clearly documented, prioritized, and tracked to resolution
• Audits and assessments are predictable and well-supported
• Security documentation is current, accurate, and usable
• Clients understand their security posture and next steps
• Internal teams rely on you as a trusted security and compliance resource

Work Style

• Organized, accountable, and comfortable owning outcomes
• Able to manage multiple priorities without losing attention to detail
• Practical, risk-focused, and business-aware
• Willing to raise concerns when something is insecure, undocumented, or unclear
• Flexible work from home options available.