Security Compliance Analyst - DoD RMF, FedRAMP & Zero-Trust

RPMGlobal; Town of Florida, Northern (NY, KY); Hybrid; USD 95,000 - 135,000; Full time

Job summary

Base-2 Solutions is seeking a Security Compliance Analyst to support security compliance efforts ensuring adherence to DoD identity governance policies and compliance frameworks.

The role involves assessing, implementing, and monitoring security compliance across cloud and hybrid environments, ensuring alignment with FedRAMP, NIST 800-53 Rev. 5, DoD RMF, and Zero Trust principles, along with performing risk assessments and remediation strategies.

Qualifications

• Bachelor's degree in Cybersecurity, Information Assurance, or related field or 5+ years in security compliance analysis
• Experience conducting security assessments and preparing compliance documentation (SSPs, POA&Ms) for cloud/hybrid environments
• Proficiency with compliance tools: Purview, AWS Security Hub, Nessus, Splunk Enterprise Security

Responsibilities

• Ensure adherence to DoD identity governance policies and compliance frameworks
• Assess, implement, and monitor security compliance across cloud and hybrid environments (FedRAMP, NIST 800-53 Rev. 5, DoD RMF, Zero Trust)
• Perform security risk assessment, compliance reporting, and remediation strategies

Skills

Security assessments

SSP/POA&M preparation

Regulatory adherence

DoD RMF consultation

Education

Bachelor's degree in Cybersecurity/Info Assurance or related

No degree

Equivalent 5 years security compliance experience

Tools

Microsoft Purview

AWS Security Hub

Nessus

Splunk Enterprise Security

Job description

Base-2 Solutions is seeking a Security Compliance Analyst to support security compliance efforts ensuring adherence to DoD identity governance policies and compliance frameworks.

The role involves assessing, implementing, and monitoring security compliance across cloud and hybrid environments, ensuring alignment with FedRAMP, NIST 800-53 Rev. 5, DoD RMF, and Zero Trust principles, along with performing risk assessments and remediation strategies.