Security Compliance Analyst — IT Audits & Controls

Brooksource; Atlanta (GA); Hybrid; USD 75,000 - 110,000; Full time

Job summary

Brooksource is seeking an Information Security Compliance Analyst in Atlanta, GA to support IT audits, compliance assessments, and control-testing activities within a Governance, Risk & Compliance team. The role involves collecting evidence, drafting policies, and coordinating remediation efforts with multiple stakeholders.

The ideal candidate will have experience with NIST SP 800-171 and various security frameworks, with strong communication and organizational skills to manage multiple

Qualifications

• Experience supporting IT audits, security compliance, risk management, or control-assurance activities.
• Understanding of audit methodology, control design and testing, and evidence validation.
• Working knowledge of NIST SP 800-171 requirements.
• Ability to draft and interpret policies, procedures, and control documentation.

Responsibilities

• Support internal and external IT audits, compliance assessments, and control-testing activities.
• Collect, organize, validate, and interpret control evidence and supporting documentation.
• Assist with evaluating controls against applicable requirements, including NIST SP 800-171.
• Draft, update, and maintain policies, procedures, control narratives, and compliance documentation.
• Identify documentation or evidence gaps and coordinate with control owners to address them.
• Support the development and maintenance of System Security Plans, when applicable.
• Research regulatory and compliance requirements and summarize findings for leadership and stakeholders.
• Assist with tracking remediation activities, audit findings, control deficiencies, and corrective-action plans.
• Partner with information security, technology, risk, audit, and business teams to complete assigned compliance initiatives.

Skills

IT audits

control testing

NIST SP 800-171

policy drafting

communication

risk management

audits & evidence

Job description

Brooksource is seeking an Information Security Compliance Analyst in Atlanta, GA to support IT audits, compliance assessments, and control-testing activities within a Governance, Risk & Compliance team. The role involves collecting evidence, drafting policies, and coordinating remediation efforts with multiple stakeholders.

The ideal candidate will have experience with NIST SP 800-171 and various security frameworks, with strong communication and organizational skills to manage multiple