Cybersecurity Compliance Analyst

Cybersecurity Compliance Analyst

Job :

Type:
Full Time W/Benefits Ret Match

Location:

US-MD-Suitland

Security Clearance:
Clearable

Entarian is seeking a Cybersecurity Compliance Analyst to support Information System Security Officers (ISSOs) in maintaining cybersecurity compliance for assigned NOAA NESDIS OSPO FISMA systems. The Analyst prepares, maintains, and tracks the documentation, security evidence, and supporting records required for Continuous Monitoring and Security Control Assessments (SCAs).

The role focuses on compliance coordination, artifact readiness, assessment support, remediation tracking, and accurate status reporting. The Analyst works under the direction of the ISSO and coordinates with system and technical stakeholders to ensure required information is complete, current, and available when needed.

• Provide day-to-day cybersecurity compliance and related systems-analysis support to assigned ISSOs and FISMA systems.
• Prepare, maintain, and update Continuous Monitoring schedules, trackers, packages, and supporting documentation.
• Collect, organize, review, and track security-control evidence and supporting artifacts for recurring compliance activities.
• Prepare SCA documentation and evidence packages and coordinate artifact requests with system and technical stakeholders.
• Maintain assessment trackers, document outstanding evidence requests, and track SCA findings through remediation and closure.
• Support creation, maintenance, and status tracking of Plans of Action and Milestones (POA&Ms), including remediation evidence and milestone updates.
• Maintain compliance calendars, action-item logs, deliverable trackers, and status reports for ISSO review.
• Coordinate with System Owners, engineers, system administrators, and other stakeholders to obtain required compliance documentation and evidence.
• Review cybersecurity documentation and artifacts for completeness, consistency, currency, and readiness for Government or assessor review.
• Maintain accurate cybersecurity records and compliance information in JSAM and other Government-designated repositories and tracking tools.
• Identify missing, overdue, or incomplete compliance items and elevate risks, deficiencies, or schedule concerns to the ISSO.
• Support recurring compliance meetings, data calls, assessment activities, and status reporting as directed by the ISSO.
• Support NIST RMF and A&A/ATO activities by developing, updating, and quality-reviewing cybersecurity documentation, including System Securi
• ents, and authorization artifacts.
• Review system Change Requests and support preparation and tracking of Security Threshold Analysis (STA) and Security Impact Analysis (SIA) documentation and related security-documentation updates.
• Review vulnerability findings and track patching, configuration hardening, remediation actions, supporting evidence, and related POA&Ms updates for ISSO review.
• Support audit and assessment readiness by maintaining complete, current, and traceable documentation and evidence for internal and external reviews, assessments, inspections, and authorization activities.

This position supports work at NOAA's Suitland, MD facility with limited telework permitted.

The salary range for this role is $105,/year.

• Bachelor's degree in Cybersecurity, Information Technology, Information Systems, Computer Science, Engineering, or a related field, or equivalent experience as permitted by the applicable labor category.
• Experience supporting cybersecurity compliance, FISMA systems, security documentation, Continuous Monitoring, Security Control Assessments, or related RMF activities.
• Working knowledge of NIST RMF, NIST SP 800-53, FIPS 199/200, A&A/ATO, Continuous Monitoring,…