Security Compliance Analyst

Base-2 Solutions, LLC; Town of Florida (NY); On-site; USD 110,000 - 150,000; Full time

Job summary

Base-2 Solutions is seeking a Security Compliance Analyst to support security compliance efforts ensuring adherence to DoD identity governance policies and compliance frameworks.

The role requires a Active Top Secret/SCI clearance with experience in DoD RMF, FedRAMP, and NIST 800-53 Rev. 5. Candidates should have a strong background in cloud/hybrid security compliance and risk management.

Qualifications

• Bachelor’s degree in Cybersecurity or related field OR 5+ years in security compliance analysis.
• Experience conducting security assessments and preparing SSPs/POA&M documents for cloud and hybrid environments.
• Proficient with compliance tools such as Purview, AWS Security Hub, Nessus, or Splunk Enterprise Security.

Responsibilities

• Adhere to DoD identity governance policies and compliance frameworks.
• Assess, implement, and monitor security compliance across cloud and hybrid environments (FedRAMP, NIST 800-53 Rev. 5, DoD RMF).
• Perform security risk assessments, compliance reporting, and vulnerability remediation strategies.

Skills

Security compliance

Risk assessment

Regulatory documentation

Education

Bachelor’s degree in Cybersecurity or related field

No degree (equivalent 5 years of experience)

Tools

Microsoft Purview

AWS Security Hub

Nessus

Splunk Enterprise Security

Job description

Position Summary

Base-2 Solutions is seeking a Security Compliance Analyst to support security compliance efforts ensuring adherence to DoD identity governance policies and compliance frameworks.

Essential Duties and Responsibilities

• Ensure adherence to DoD identity governance policies and compliance frameworks.
• Assess, implement, and monitor security compliance frameworks across cloud and hybrid environments, ensuring adherence to FedRAMP, NIST 800-53 Rev. 5, DoD RMF, and Zero Trust security principles.
• Perform security risk assessment, compliance reporting, and vulnerability remediation strategies.

Required Qualifications

• Bachelor’s degree in Cybersecurity, Information Assurance, or a related field OR a minimum of 5 years of equivalent experience in security compliance analysis.
• Demonstrated experience in conducting security assessments, preparing compliance documentation (SSPs, POA&Ms), and ensuring regulatory adherence for cloud and hybrid infrastructures.
• Proficiency with compliance tools such as Microsoft Purview, AWS Security Hub, Nessus, or Splunk Enterprise Security.

Preferred Qualifications

• Certified Information Systems Auditor (CISA).
• Certified Information Systems Security Professional (CISSP).
• CompTIA Security .

Required Education and Experience Equivalency

• Bachelor’s degree in Cybersecurity, Information Assurance, or a related field.
• No degree.
• OR 5 years of equivalent experience in security compliance analysis.

Required Certifications

• None specified.

Required Security Clearance

• Active Top Secret/SCI