Senior Cybersecurity Compliance Analyst (Secret)

MAXIMUS; Corridor North (MD); On-site; USD 80,000 - 120,000; Full time

Job summary

Maximus is seeking a Security Compliance professional to lead government-contract security programs within a 24x7 environment. You will manage POA&Ms, perform risk assessments, and support RMF/NIST workflows to ensure compliance.

This role requires an Active Secret clearance and US citizenship, with on-site work expected in the Corridor North region. You will collaborate with stakeholders, deliver compliance reports, and guide incident response.

Qualifications

• Active Secret clearance required.
• US citizens only; dual citizenship not eligible.
• 7+ years in security compliance or related cybersecurity field.
• 4+ years managing POA&M in government contracting.
• Experience with Federal security frameworks (FISMA, NIST RMF).
• Ability to prepare compliance documentation and reports.
• Willingness to work onsite within a commutable distance and participate in 24x7x365 operations.

Responsibilities

• Serve as the primary point of contact for security compliance activities with stakeholders.
• Manage and maintain POA&Ms and ensure timely remediation.
• Support vulnerability management—run scans, review results, track remediation, verify closure.
• Conduct risk assessments, risk analysis, and document mitigations.
• Perform compliance reviews to align systems with regulations and frameworks (NIST RMF).
• Prepare and maintain SSPs, assessment reports, and risk analyses.
• Collaborate with technical teams to validate controls and provide guidance.
• Participate in incident response and after-action reviews with documented lessons learned.
• Develop and deliver compliance reports and metrics for leadership and auditors.
• Contribute to security awareness and training across teams.

Skills

Security compliance

Vulnerability management

Risk management

FISMA/NIST RMF

Incident response

Documentation & reports

Communications

Tools

Antivirus software

Vulnerability scanners

Access control

Endpoint protection

PKI certificate management

SIEM/logging

DLP

Job description

Maximus is seeking a Security Compliance professional to lead government-contract security programs within a 24x7 environment. You will manage POA&Ms, perform risk assessments, and support RMF/NIST workflows to ensure compliance.

This role requires an Active Secret clearance and US citizenship, with on-site work expected in the Corridor North region. You will collaborate with stakeholders, deliver compliance reports, and guide incident response.