Systems Analyst / Security Compliance Auditor

Axiom Consultants; Rockville (MD); Híbrido; USD 60.000 - 90.000; Jornada completa

Descripción de la vacante

Axiom Consultants is hiring a Junior Systems Analyst / Security Compliance Auditor to support cybersecurity and compliance in a federal IT environment. This remote role includes occasional on-site meetings at NOAA/NMFS offices in Silver Spring, MD.

The successful candidate will assist in audits, security assessments, policy reviews, and risk reporting, helping strengthen the organization’s security posture in line with FISMA, RMF, and related standards. Collaboration with teams is essential.

Formación

• Bachelor's degree in IT, cybersecurity, CS, or related field (or equivalent experience).
• 1–3 years in IT security, systems administration, or audit.
• Basic understanding of NIST RMF and FISMA.
• Experience with JCAM for federal compliance processes preferred.
• Experience performing vulnerability assessments and audits.
• Strong written communication for technical reports and documentation.
• Ability to work independently and with a team.

Responsabilidades

• Assist in developing and executing a comprehensive IT security audit program across systems and infrastructure.
• Perform security assessments, configuration reviews, and vulnerability testing per federal requirements.
• Support continuous monitoring to maintain compliance with regulations and baselines.
• Review policies and procedures, recommending improvements and controls.
• Document audit findings and remediation plans for management review.

Conocimientos

Security auditing

Vulnerability assessment

Technical writing

Independent work

Educación

Bachelor's in IT

Herramientas

JCAM

Descripción del empleo

***Remote opportunity with occasional on-site meetings at NOAA/NMFS offices in Silver Spring, MD.

Position Overview

We are seeking a Junior Systems Analyst / Security Compliance Auditor to support ongoing cybersecurity and compliance initiatives for a federal IT environment. This role will focus on ensuring that IT systems, applications, and infrastructure maintain continuous compliance with federal cybersecurity mandates, agency-specific policies, and internal security standards.

The ideal candidate will assist in maintaining a mature and effective security compliance program by supporting audits, conducting security assessments, reviewing policies, and providing recommendations to strengthen the organization's overall cybersecurity posture.

Key Responsibilities

Security Compliance & Audit Support

• Assist in developing and executing a comprehensive IT security audit program designed to evaluate compliance across systems, applications, and infrastructure.
• Perform technical security assessments, configuration compliance reviews, and vulnerability assessments in accordance with federal security requirements.
• Support continuous monitoring efforts to ensure systems remain compliant with applicable cybersecurity regulations and security baselines.

Policy Review & Process Improvement

• Review existing IT security policies, procedures, and documentation to evaluate effectiveness and identify areas for improvement.
• Provide recommendations to strengthen internal security controls and ensure alignment with federal regulations, agency requirements, and industry best practices.
• Assist in maintaining and updating compliance documentation, security procedures, and audit artifacts.

Reporting & Risk Management

• Document audit findings and security assessment results in detailed reports for management review.
• Identify security vulnerabilities, compliance gaps, and potential risks, while providing actionable remediation recommendations.
• Support tracking and follow-up of remediation activities to ensure timely resolution of identified issues.

Cybersecurity Compliance Support

• Provide support in interpreting and applying federal cybersecurity compliance frameworks and standards.
• Assist with compliance activities related to:
• Federal Information Security Modernization Act (FISMA)
• NIST Risk Management Framework (RMF)
• Privacy Act compliance requirements
• Agency-specific cybersecurity and privacy policies
• Collaborate with internal teams to ensure security controls are implemented and maintained in accordance with federal standards.

Required Qualifications

• Bachelor's degree in Information Technology, Cybersecurity, Computer Science, Information Systems, or a related field (or equivalent professional experience).
• 1–3 years of experience supporting IT systems administration, cybersecurity, security compliance, or audit activities.
• Basic understanding of federal cybersecurity frameworks including NIST RMF, FISMA, and security compliance standards.
• Experience with JCAM application designed to help federal agencies streamline compliance, security, and authorization processes is preferred.
• Experience performing vulnerability assessments, system security reviews, or compliance audits.
• Ability to analyze technical security findings and communicate recommendations clearly.
• Strong written communication skills with experience preparing technical reports and documentation in Word or PowerPoint format.
• Ability to work independently while collaborating effectively within a team environment.