Security Compliance Analyst

RPMGlobal; Town of Florida, Northern (NY, KY); Hybrid; USD 95,000 - 135,000; Full time

Job summary

Base-2 Solutions is seeking a Security Compliance Analyst to support security compliance efforts ensuring adherence to DoD identity governance policies and compliance frameworks.

The role involves assessing, implementing, and monitoring security compliance across cloud and hybrid environments, ensuring alignment with FedRAMP, NIST 800-53 Rev. 5, DoD RMF, and Zero Trust principles, along with performing risk assessments and remediation strategies.

Qualifications

• Bachelor's degree in Cybersecurity, Information Assurance, or related field or 5+ years in security compliance analysis
• Experience conducting security assessments and preparing compliance documentation (SSPs, POA&Ms) for cloud/hybrid environments
• Proficiency with compliance tools: Purview, AWS Security Hub, Nessus, Splunk Enterprise Security

Responsibilities

• Ensure adherence to DoD identity governance policies and compliance frameworks
• Assess, implement, and monitor security compliance across cloud and hybrid environments (FedRAMP, NIST 800-53 Rev. 5, DoD RMF, Zero Trust)
• Perform security risk assessment, compliance reporting, and remediation strategies

Skills

Security assessments

SSP/POA&M preparation

Regulatory adherence

DoD RMF consultation

Education

Bachelor's degree in Cybersecurity/Info Assurance or related

No degree

Equivalent 5 years security compliance experience

Tools

Microsoft Purview

AWS Security Hub

Nessus

Splunk Enterprise Security

Job description

Position Summary

Base-2 Solutions is seeking a Security Compliance Analyst to support security compliance efforts ensuring adherence to DoD identity governance policies and compliance frameworks.

Essential Duties and Responsibilities

• Ensure adherence to DoD identity governance policies and compliance frameworks.
• Assess, implement, and monitor security compliance frameworks across cloud and hybrid environments, ensuring adherence to FedRAMP, NIST 800-53 Rev. 5, DoD RMF, and Zero Trust security principles.
• Perform security risk assessment, compliance reporting, and vulnerability remediation strategies.

Required Qualifications

• Bachelor's degree in Cybersecurity, Information Assurance, or a related field OR a minimum of 5 years of equivalent experience in security compliance analysis.
• Demonstrated experience in conducting security assessments, preparing compliance documentation (SSPs, POA&Ms), and ensuring regulatory adherence for cloud and hybrid infrastructures.
• Proficiency with compliance tools such as Microsoft Purview, AWS Security Hub, Nessus, or Splunk Enterprise Security.

Preferred Qualifications

• Certified Information Systems Auditor (CISA).
• Certified Information Systems Security Professional (CISSP).
• CompTIA Security+.

Required Education and Experience Equivalency

• Bachelor's degree in Cybersecurity, Information Assurance, or a related field.
• No degree.
• OR 5 years of equivalent experience in security compliance analysis.

Required Certifications

• None specified.

Required Security Clearance

• Active Top Secret/SCI