Security & Compliance Analyst: Risk, Audits & Controls

Socket.dev; Sterling (VA); On-site; USD 70,000 - 95,000; Full time

Benefits offered by this job

Medical benefits

Dental benefits

Vision benefits

401(k) retirement plan

Disability insurance

Flexible spending accounts

Job summary

ASSYST is seeking a Security & Compliance Analyst to support cybersecurity, risk management, compliance, and security operations activities onsite in Sterling, VA. The role focuses on assessments, monitoring controls, vulnerability management, and documentation aligned with NIST, FISMA, and CIS controls.

We require 1–3 years in cybersecurity or related fields, U.S. citizenship with ability to obtain security clearance, and a bachelor’s in cyber security or related discipline.

Qualifications

• 1–3 years of professional experience in cybersecurity, information security, IT compliance, risk management, or related field.
• U.S. Citizenship and ability to obtain/maintain a U.S. Government security clearance.
• Bachelor’s degree in Cybersecurity, Information Security, or related discipline.
• CompTIA Security+ or Network+ certification preferred/required.
• Understanding of cybersecurity principles, controls, vulnerabilities, and risk management.
• Familiarity with NIST Cybersecurity Framework, NIST 800-53, FISMA, CIS Controls, or similar standards.
• Basic understanding of network security, endpoint security, IAM, and vulnerability management.
• Strong analytical, documentation, communication, and problem-solving skills.
• Experience supporting Federal, State, or other highly regulated environments.

Responsibilities

• Support security and compliance assessments, audits, and risk management activities.
• Monitor and evaluate security controls, policies, procedures, and compliance requirements.
• Assist with vulnerability management, security assessments, and remediation tracking.
• Maintain security documentation, policies, procedures, risk registers, and compliance evidence.
• Support implementation and monitoring of security controls aligned with NIST, FISMA, CIS, or other applicable frameworks.
• Assist with security incident documentation, investigation, and escalation.
• Review system logs, security alerts, vulnerability reports, and other security information.
• Track identified security weaknesses and work with technical teams to support timely remediation.

Skills

Cybersecurity knowledge

Documentation

Communication

Problem-solving

Regulatory compliance

Risk management

Education

Bachelor’s degree in Cybersecurity or Information Security

CompTIA Security+ or Network+ certification

Job description

ASSYST is seeking a Security & Compliance Analyst to support cybersecurity, risk management, compliance, and security operations activities onsite in Sterling, VA. The role focuses on assessments, monitoring controls, vulnerability management, and documentation aligned with NIST, FISMA, and CIS controls.

We require 1–3 years in cybersecurity or related fields, U.S. citizenship with ability to obtain security clearance, and a bachelor’s in cyber security or related discipline.