Security & Compliance Analyst

If you are unable to complete this application due to a disability, contact this employer to ask for an accommodation or an alternative application process.

Full Time Professional TAMPA, FL, US

7 days ago Requisition

The Security & Compliance Analyst supports mission-critical objectives under the referenced work order by assessing, implementing, and monitoring security compliance frameworks across cloud and hybrid environments. This role ensures adherence to FedRAMP, NIST 800-53 Rev. 5, DoD RMF, and Zero Trust security principles while ensuring DoD identity governance policy compliance.

• The Security & Compliance Analyst is responsible for performing security risk assessment, compliance reporting, and vulnerability remediation strategies.
• The position requires conducting security assessments and preparing compliance documentation (SSPs, POA&Ms).
• Analysts will ensure regulatory adherence for cloud and hybrid infrastructures.
• The role includes monitoring and validating deployments for compliance with RMF, NIST 800-53, and DoD IL4/IL5 requirements.

The contractor shall provide personnel who meet one of the following requirements:

• Bachelor's degree in Cybersecurity, Information Assurance, or a related field; or
• A minimum of five (5) years of professional experience in security compliance analysis.

Candidates must have demonstrated experience in the following areas:

• Conducting security assessments.
• Ensuring regulatory adherence for cloud and hybrid infrastructures.
• Working with compliance tools such as Microsoft Purview, AWS Security Hub, Nessus, or Splunk Enterprise Security.
• Implementing vulnerability remediation strategies.

• Expertise in security risk assessment and compliance reporting.
• Working knowledge of FedRAMP, NIST 800-53 Rev. 5, DoD RMF, and Zero Trust security principles.
• Proficiency with Microsoft Purview, AWS Security Hub, Nessus, and Splunk Enterprise Security.
• Strong analytical and documentation skills.
• Ability to conduct vulnerability assessments and develop remediation strategies.

• Bachelor's degree in a relevant field, or an equivalent combination of education and experience.
• Certified Information Systems Auditor (CISA) (Preferred, Not Required)
• Certified Information Systems Security Professional (CISSP) (Preferred, Not Required)
• CompTIA Security+ (Preferred, Not Required)

An active TS/SCI security clearance is required for on-site duty location