Cybersecurity Compliance Analyst

Since our founding 2012, APTNEXUS has empowered federal agencies and commercial enterprises to navigate the complexities of the digital landscape. As a quality-driven small business, we specialize in the seamless delivery of IT modernization and elite cybersecurity solutions. We help our clients modernize and fortify their technology stacks —ensuring their most critical data and assets remain resilient, optimized, and secure in an evolving threat environment.

Ability to obtain and maintain a Minimum Background Investigation (MBI) for our Department of Treasury customer.
Candidates must reside in, and perform all work from, the continental United States or its outlying territories.

Remote (United States)

Full-time, remote. Must be available during core business hours (Eastern Time) to support stakeholder calls and submission deadlines. Occasional travel may be required.

$65,000 to $75,000 annually, commensurate with experience

Apt Nexus is seeking a Cybersecurity Compliance Analyst I to support a cybersecurity compliance program for our Department of Treasury customer. The program oversees the protection of sensitive federal data held by federal, state, and local government organizations, which submit corrective action plans, system security plans, technical inquiries, and change notifications for review. In this role, you will evaluate these submissions against security requirements tailored from NIST SP 800-53, working under the guidance of senior analysts, and deliver clear, well-supported compliance determinations.

The ideal candidate is a detail-oriented self-starter who can manage a steady volume of reviews with consistency and precision.

• Evaluate corrective action plans and POA&Ms submitted by partner organizations, including supporting evidence such as screenshots, audit logs, and policy documents, and determine whether each finding is open or closed.
• Recommend follow-on actions required to close open findings, and address questions and statements raised in partner organization responses.
• Review system security plans and related compliance submissions against applicable NIST controls, identify compliance status, and articulate applicable requirements.
• Prepare written responses to technical inquiries on topics such as multifactor authentication, cloud configuration, and control implementation, and participate in follow-up calls as needed.
• Evaluate advance notifications of planned changes, such as cloud adoption, contractor access, and test environments, and provide written cybersecurity guidance.
• Request clarification or additional documentation from partner organizations when submissions are incomplete, and track responses to closure.
• Track assigned reviews, due dates, and turnaround to meet customer deadlines.
• Use and help maintain standardized templates and Excel-based tools, including VBA macros, that support consistent and efficient reviews.
• Maintain complete and accurate records of all correspondence and documentation in the customer’s case management system.
• Comply with all customer security, privacy, and records management requirements, using only Government-furnished equipment and approved systems.

• One to three years of experience in cybersecurity compliance, audit, assessment, or a related information security role. Recent graduates with relevant internship or academic project experience are encouraged to apply.
• Demonstrated experience, whether professional, internship, or academic, identifying and applying information security or cybersecurity requirements.
• Working knowledge of NIST SP 800-53 and the NIST Risk Management Framework, including how security controls are implemented…