Systems Analyst / Security Compliance Auditor

Axiom Consultants; Silver Spring (MD); Hybrid; USD 65,000 - 90,000; Full time

Job summary

Axiom Consultants is seeking a Junior Systems Analyst / Security Compliance Auditor for a remote role with occasional on-site meetings at NOAA/NMFS offices in Silver Spring, MD. You will support cybersecurity and compliance initiatives in a federal IT environment, helping maintain continuous compliance with federal mandates and agency policies.

The position emphasizes audits, security assessments, policy reviews, and remediation recommendations, with opportunities to contribute to risk

Qualifications

• Bachelor's degree or equivalent professional experience in IT/cybersecurity.
• 1–3 years of IT systems administration, cybersecurity, security compliance, or audit experience.
• Understanding of NIST RMF, FISMA, and security compliance standards.
• Experience with JCAM application designed to help federal agencies streamline compliance, security, and authorization processes is preferred.
• Experience performing vulnerability assessments, system security reviews, or compliance audits.
• Ability to analyze technical security findings and communicate recommendations clearly.
• Strong written communication skills with experience preparing technical reports and documentation in Word or PowerPoint format.
• Ability to work independently while collaborating effectively within a team environment.

Responsibilities

• Security Compliance & Audit Support: assist in developing and executing a comprehensive IT security audit program designed to evaluate compliance across systems, applications, and infrastructure.
• Policy Review & Process Improvement: review existing IT security policies, procedures, and documentation to evaluate effectiveness and identify areas for improvement.
• Reporting & Risk Management: document audit findings and security assessment results in detailed reports for management review, identify vulnerabilities and risks.
• Cybersecurity Compliance Support: provide support in interpreting and applying federal cybersecurity compliance frameworks and standards; assist with RMF, FISMA, and agency policies.

Skills

NIST RMF knowledge

FISMA knowledge

Security auditing

Vulnerability assessment

Technical reporting

Education

Bachelor's degree in Information Technology, Cybersecurity, Computer Science, Information Systems, or a related field

Tools

JCAM application

Job description

Junior Systems Analyst / Security Compliance AuditorRemote opportunity with occasional on-site meetings at NOAA/NMFS offices in Silver Spring, MD.

Position Overview

We are seeking a Junior Systems Analyst / Security Compliance Auditor to support ongoing cybersecurity and compliance initiatives for a federal IT environment. This role will focus on ensuring that IT systems, applications, and infrastructure maintain continuous compliance with federal cybersecurity mandates, agency-specific policies, and internal security standards. The ideal candidate will assist in maintaining a mature and effective security compliance program by supporting audits, conducting security assessments, reviewing policies, and providing recommendations to strengthen the organization's overall cybersecurity posture.

Key Responsibilities

Security Compliance & Audit SupportAssist in developing and executing a comprehensive IT security audit program designed to evaluate compliance across systems, applications, and infrastructure.Perform technical security assessments, configuration compliance reviews, and vulnerability assessments in accordance with federal security requirements.Support continuous monitoring efforts to ensure systems remain compliant with applicable cybersecurity regulations and security baselines.

Policy Review & Process ImprovementReview existing IT security policies, procedures, and documentation to evaluate effectiveness and identify areas for improvement.Provide recommendations to strengthen internal security controls and ensure alignment with federal regulations, agency requirements, and industry best practices.Assist in maintaining and updating compliance documentation, security procedures, and audit artifacts.

Reporting & Risk ManagementDocument audit findings and security assessment results in detailed reports for management review.Identify security vulnerabilities, compliance gaps, and potential risks, while providing actionable remediation recommendations.Support tracking and follow-up of remediation activities to ensure timely resolution of identified issues.

Cybersecurity Compliance SupportProvide support in interpreting and applying federal cybersecurity compliance frameworks and standards.Assist with compliance activities related to:Federal Information Security Modernization Act (FISMA)NIST Risk Management Framework (RMF)Privacy Act compliance requirementsAgency-specific cybersecurity and privacy policiesCollaborate with internal teams to ensure security controls are implemented and maintained in accordance with federal standards.

Required Qualifications

Bachelor's degree in Information Technology, Cybersecurity, Computer Science, Information Systems, or a related field (or equivalent professional experience).1–3 years of experience supporting IT systems administration, cybersecurity, security compliance, or audit activities.Basic understanding of federal cybersecurity frameworks including NIST RMF, FISMA, and security compliance standards.Experience with JCAM application designed to help federal agencies streamline compliance, security, and authorization processes is preferred.Experience performing vulnerability assessments, system security reviews, or compliance audits.Ability to analyze technical security findings and communicate recommendations clearly.Strong written communication skills with experience preparing technical reports and documentation in Word or PowerPoint format.Ability to work independently while collaborating effectively within a team environment.