Security Compliance Analyst

RPMGlobal; Town of Florida, Northern (NY, KY); Hybrid; USD 90,000 - 130,000; Full time

Job summary

Base-2 Solutions seeks a Security Compliance Analyst to support DoD identity governance policies and compliance frameworks across cloud and hybrid environments.

The role involves conducting security assessments, producing SSPs and POA&Ms, and ensuring regulatory adherence with FedRAMP, NIST 800-53 Rev. 5, DoD RMF, and Zero Trust principles. A Top Secret/SCI clearance is required.

Qualifications

• Bachelor's degree in Cybersecurity, Information Assurance, or related field, or 5+ years of equivalent experience.
• Experience conducting security assessments and preparing compliance documentation (SSPs, POA&Ms).
• Experience ensuring regulatory adherence for cloud and hybrid infrastructures.

Responsibilities

• Adhere to DoD identity governance policies and compliance frameworks.
• Assess, implement, and monitor security compliance across cloud and hybrid environments.
• Perform security risk assessment, compliance reporting, and remediation strategies.

Skills

Security compliance

Risk assessment

Regulatory reporting

Cloud security

Education

Bachelor's degree in Cybersecurity / Information Assurance or related field

5+ years equivalent experience

Tools

Microsoft Purview

AWS Security Hub

Nessus

Splunk Enterprise Security

Job description

Position Summary

Base-2 Solutions is seeking a Security Compliance Analyst to support security compliance efforts ensuring adherence to DoD identity governance policies and compliance frameworks.

Essential Duties and Responsibilities

• Ensure adherence to DoD identity governance policies and compliance frameworks.
• Assess, implement, and monitor security compliance frameworks across cloud and hybrid environments, ensuring adherence to FedRAMP, NIST 800-53 Rev. 5, DoD RMF, and Zero Trust security principles.
• Perform security risk assessment, compliance reporting, and vulnerability remediation strategies.

Required Qualifications

• Bachelor's degree in Cybersecurity, Information Assurance, or a related field OR a minimum of 5 years of equivalent experience in security compliance analysis.
• Demonstrated experience in conducting security assessments, preparing compliance documentation (SSPs, POA&Ms), and ensuring regulatory adherence for cloud and hybrid infrastructures.
• Proficiency with compliance tools such as Microsoft Purview, AWS Security Hub, Nessus, or Splunk Enterprise Security.

Preferred Qualifications

• Certified Information Systems Auditor (CISA).
• Certified Information Systems Security Professional (CISSP).
• CompTIA Security+.

Required Education and Experience Equivalency

• Bachelor's degree in Cybersecurity, Information Assurance, or a related field.
• No degree.
• OR 5 years of equivalent experience in security compliance analysis.

Required Certifications

• None specified.

Required Security Clearance

• Active Top Secret/SCI