Senior Cybersecurity Compliance Analyst

Aptnexus; Washington (District of Columbia); Vor Ort; USD 115.000 - 140.000; Vollzeit

Zusammenfassung

AptNexus is seeking a Senior Cybersecurity Compliance Analyst to support a federal cybersecurity program. You will assess submissions against NIST controls, provide clear determinations, and guide remediation across government data.

This role requires detailed analysis, strong writing, and the ability to manage multiple reviews with precision. The ideal candidate has 7+ years in cyber, 5+ years in federal compliance, and holds certifications such as CISA, CySA+, GSNA, or GIAC.

Qualifikationen

• Seven years of cybersecurity experience, with at least five in federal cybersecurity compliance
• Experience evaluating POA&Ms or system security plans
• Strong knowledge of NIST SP 800-53, RMF, NIST SP 800-30 and FIPS

Aufgaben

• Evaluate corrective action plans and POA&Ms with supporting evidence to determine open/closed status
• Recommend follow-on actions to close findings and address partner responses
• Review system security plans against NIST controls and clearly identify compliance status
• Prepare written responses to technical inquiries and conduct follow-up calls
• Evaluate planned changes and provide written cybersecurity guidance
• Perform quality reviews of audit reports and remediation tracking
• Manage the submission review queue to meet deadlines
• Develop and maintain automated review tools and templates
• Review others' work for accuracy and provide guidance
• Maintain complete records in the case management system
• Contribute to process improvements of templates and guidance
• Comply with customer security, privacy, and records management requirements

Kenntnisse

CISA

CySA+

GSNA

GIAC

Policy & procedure writing

Attention to detail

Time management

Federal compliance understanding

Ausbildung

Bachelor’s degree in IT, cybersecurity, information systems or related field

High school diploma

Tools

Excel

Word

VBA macros

Jobbeschreibung

Since our founding 2012, APTNEXUS has empowered federal agencies and commercial enterprises to navigate the complexities of the digital landscape. As a quality-driven small business, we specialize in the seamless delivery of IT modernization and elite cybersecurity solutions. We help our clients modernize and fortify their technology stacks —ensuring their most critical data and assets remain resilient, optimized, and secure in an evolving threat environment.

Clearance

Ability to obtain and maintain a Minimum Background Investigation (MBI) for our Department of Treasury customer. Candidates must reside in, and perform all work from, the continental United States or its outlying territories.

Location

Remote (United States)

Work Schedule

Full-time, remote. Must be available during core business hours (Eastern Time) to support stakeholder calls and submission deadlines. Occasional travel may be required.

Salary Range

$115,000 to $140,000 annually, commensurate with experience

Position Overview

AptNexus is seeking a Senior Cybersecurity Compliance Analyst to support a cybersecurity compliance program for our Department of Treasury customer. The program oversees the protection of sensitive federal data held by federal, state, and local government organizations, which submit corrective action plans, system security plans, technical inquiries, and change notifications for review. In this role, you will evaluate these submissions against security requirements tailored from NIST SP 800-53 and deliver clear, well-supported compliance determinations and guidance. The ideal candidate is a detail-oriented self-starter who can manage a steady volume of reviews with consistency and precision.

Duties/Responsibilities

• Evaluate corrective action plans and POA&Ms submitted by partner organizations, including supporting evidence such as screenshots, audit logs, and policy documents, and determine whether each finding is open or closed.
• Recommend specific follow-on actions required to close open findings, and address questions and statements raised in partner organization responses.
• Review system security plans and related compliance submissions against applicable NIST controls, clearly identify compliance status, and articulate applicable requirements.
• Prepare written responses to technical inquiries on topics such as multifactor authentication, cloud configuration, and control implementation methodologies, and conduct follow-up calls as needed.
• Evaluate advance notifications of planned changes, such as cloud adoption, contractor access, and test environments, and provide written cybersecurity guidance.
• Perform quality reviews of audit reports and remediation tracking documentation before delivery to the customer.
• Manage the submission review queue, tracking volumes, due dates, and turnaround to meet customer deadlines.
• Develop and maintain automated tools, such as Excel VBA macros and standardized templates, to improve the consistency and efficiency of reviews.
• Review the work of other analysts for accuracy and consistency, and provide technical guidance on complex determinations.
• Maintain complete and accurate records of all correspondence and documentation in the customer’s case management system.
• Contribute recommendations to improve review procedures, templates, and guidance.
• Comply with all customer security, privacy, and records management requirements, using only Government-furnished equipment and approved systems.

Required Skills

• Minimum of seven (7) years of cybersecurity experience, including at least five (5) years in federal cybersecurity compliance, audit, or assessment, with direct experience evaluating POA&Ms or system security plans.
• Expert working knowledge of NIST SP 800-53 (moderate and high baselines), the NIST Risk Management Framework, NIST SP 800-30, and FIPS, including the ability to evaluate compliance against control sets tailored from NIST.
• Demonstrated ability to evaluate technical evidence, such as configuration screenshots, audit logs, scan results, and policy documents, and determine whether a control requirement has been satisfied.
• Working knowledge of the technologies that commonly generate compliance questions, including cloud services (SaaS, IaaS, PaaS), multifactor authentication, encryption standards, operating systems, and network devices.
• Exceptional technical writing skills, with the ability to produce clear, consistent, and well-supported determinations and guidance.
• Advanced Microsoft Excel and Word skills; experience developing or maintaining VBA macros and templates is strongly preferred.
• Proven ability to manage a high volume of concurrent reviews and meet firm deadlines without sacrificing accuracy.
• Detail-oriented self-starter who takes ownership of assignments, manages competing priorities, and drives work to completion with minimal supervision.
• Certification:
• Must have at least one of the following certifications:
• Certified Information Systems Auditor (CISA) (preferred)
• CompTIA Cybersecurity Analyst (CySA+)
• GIAC Systems and Network Auditor (GSNA)
• Polished written and verbal communication skills, with a professional and courteous approach to partner organizations and customer personnel.
• Sound professional judgment, objectivity, and integrity in handling sensitive information.
• Must meet federal eligibility requirements for a position of public trust, including U.S. citizenship or lawful permanent residency, federal tax compliance, Selective Service registration (if applicable), a credit check, and fingerprinting.
• Must complete customer-required security awareness training upon onboarding and annually thereafter.

Education Requirement

High school diploma required. Bachelor’s degree in information technology, cybersecurity, information systems, accounting, or a related field preferred.

AptNexus is an Equal Opportunity Employer. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability or protected veteran status.