Security & Compliance Analyst

Zion Cloud Solutions; Chicago (IL); On-site; USD 120,000 - 150,000; Full time

Job summary

Zion Cloud Solutions is seeking an experienced Security & Compliance Analyst to keep a large, regulated technology environment secure, compliant, and audit-ready. You will monitor controls, maintain documentation, and collaborate across security, IT, and delivery teams to ensure standards are actually met.

This hands-on role emphasizes controls, evidence, and continuous improvement, with a focus on audit readiness, vulnerability coordination, and communication of risks to leadership.

Qualifications

• Bachelor's degree in Cybersecurity, IT, or a related field.
• 5+ years in security compliance and risk management (senior-level).
• Working knowledge of NIST 800-53, HIPAA, FedRAMP, and FERPA standards.
• Experience with security control assessments, system security plans, and POA&M remediation.
• Strong written and verbal communication skills.

Responsibilities

• Conduct periodic security control assessments aligned to NIST 800-53.
• Review, maintain, and update system security plans and compliance documentation.
• Monitor access logs and coordinate vulnerability scans across systems and applications.
• Support audit readiness and reporting activities, including FedRAMP.
• Track and support remediation of Plan of Action and Milestones (POA&M) findings.
• Validate identity and access governance controls and support access management reviews.
• Communicate risks, gaps, and remediation status clearly to both technical teams and leadership.

Skills

Security compliance

NIST 800-53

Audit readiness

POA&M remediation

Written communication

Collaboration

Education

Bachelor's degree in Cybersecurity or related field

Tools

Okta

SailPoint

Job description

Location: Chicago, IL

Duration: Full-Time / Long Term Contract With potential extension.

About The Role

We're looking for an experienced Security & Compliance Analyst to help keep a large, regulated technology environment secure, compliant, and audit-ready. You'll monitor and assess security controls, maintain compliance documentation, and work across security, IT, and delivery teams to make sure standards are not just written down but actually met. This is a hands‑on role for someone who thinks in terms of controls, evidence, and continuous improvement.

What You'll Do

• Conduct periodic security control assessments aligned to NIST 800-53.
• Review, maintain, and update system security plans and compliance documentation.
• Monitor access logs and coordinate vulnerability scans across systems and applications.
• Support audit readiness and reporting activities, including FedRAMP.
• Track and support remediation of Plan of Action and Milestones (POA&M) findings.
• Validate identity and access governance controls and support access management reviews.
• Communicate risks, gaps, and remediation status clearly to both technical teams and leadership.

The ideal Security & Compliance Analyst

The Qualities That Matter Most For This Role

• Detail-oriented and thorough: You're meticulous with controls, evidence, and documentation, and you make sure nothing slips through the cracks.
• A clear communicator: You translate technical risk and compliance findings into plain language that both engineers and leadership can act on.
• Audit and evidence minded: You think in terms of controls, proof, and traceability, and you keep the environment audit-ready at all times.
• Proactive and risk-aware: You anticipate gaps and raise issues early, rather than reacting after something goes wrong.
• Collaborative: You work across security, IT, and delivery teams to get controls implemented, not just recommended.
• High integrity: You're trusted with sensitive data and you hold the line on standards, even under pressure.

What You Bring

• Bachelor's degree in Cybersecurity, IT, or a related field.
• 5+ years in security compliance and risk management (senior-level).
• Working knowledge of NIST 800-53, HIPAA, FedRAMP, and FERPA standards.
• Experience with security control assessments, system security plans, and POA&M remediation.
• Strong written and verbal communication skills.

Nice to have

• FedRAMP audit-readiness and reporting experience.
• Familiarity with identity and access management (IAM) and identity governance (IGA) platforms (e.g., Okta, SailPoint).
• Healthcare, Medicaid, or public-sector compliance experience.
• Relevant certifications (e.g., CISA, CISSP, Security+).