Cybersecurity Compliance Analyst

Entarian • Suitland, MD

1d • Hybrid

About The Position

Entarian is seeking a Cybersecurity Compliance Analyst to support Information System Security Officers (ISSOs) in maintaining cybersecurity compliance for assigned NOAA NESDIS OSPO FISMA systems. The Analyst prepares, maintains, and tracks the documentation, security evidence, and supporting records required for Continuous Monitoring and Security Control Assessments (SCAs). The role focuses on compliance coordination, artifact readiness, assessment support, remediation tracking, and accurate status reporting. The Analyst works under the direction of the ISSO and coordinates with system and technical stakeholders to ensure required information is complete, current, and available when needed.

Requirements

• Bachelor's degree in Cybersecurity, Information Technology, Information Systems, Computer Science, Engineering, or a related field, or equivalent experience as permitted by the applicable labor category.
• Experience supporting cybersecurity compliance, FISMA systems, security documentation, Continuous Monitoring, Security Control Assessments, or related RMF activities.
• Working knowledge of NIST RMF, NIST SP 800-53, FIPS 199/200, A&A/ATO, Continuous Monitoring, POA&M management, and Security Control Assessment processes.
• Strong documentation, organization, quality-review, tracking, and stakeholder-coordination skills.
• Ability to manage multiple compliance activities and deadlines while maintaining accurate records and supporting evidence.
• Secret clearance eligible.
• CompTIA Security+ required.

Nice To Haves

• Additional certifications such as CGRC, CISA, CISM, CISSP, or relevant cloud-security certifications are desirable.

Responsibilities

• Provide day-to-day cybersecurity compliance and related systems-analysis support to assigned ISSOs and FISMA systems.
• Prepare, maintain, and update Continuous Monitoring schedules, trackers, packages, and supporting documentation.
• Collect, organize, review, and track security-control evidence and supporting artifacts for recurring compliance activities.
• Prepare SCA documentation and evidence packages and coordinate artifact requests with system and technical stakeholders.
• Maintain assessment trackers, document outstanding evidence requests, and track SCA findings through remediation and closure.
• Support creation, maintenance, and status tracking of Plans of Action and Milestones (POA&Ms), including remediation evidence and milestone updates.
• Maintain compliance calendars, action-item logs, deliverable trackers, and status reports for ISSO review.
• Coordinate with System Owners, engineers, system administrators, and other stakeholders to obtain required compliance documentation and evidence.
• Review cybersecurity documentation and artifacts for completeness, consistency, currency, and readiness for Government or assessor review.
• Maintain accurate cybersecurity records and compliance information in JSAM and other Government-designated repositories and tracking tools.
• Identify missing, overdue, or incomplete compliance items and escalate risks, deficiencies, or schedule concerns to the ISSO.
• Support recurring compliance meetings, data calls, assessment activities, and status reporting as directed by the ISSO.
• Support NIST RMF and A&A/ATO activities by developing, updating, and quality-reviewing cybersecurity documentation, including System Securi ents, and authorization artifacts.
• Review system Change Requests and support preparation and tracking of Security Threshold Analysis (STA) and Security Impact Analysis (SIA) documentation and related security-documentation updates.
• Review vulnerability findings and track patching, configuration hardening, remediation actions, supporting evidence, and related POA&M updates for ISSO review.
• Support audit and assessment readiness by maintaining complete, current, and traceable documentation and evidence for internal and external reviews, assessments, inspections, and authorization activities.

Benefits

• Medical, Rx, Dental, and Vision Insurance
• 401(k) retirement plan with company-matching
• 11 Paid Federal Government Holidays
• Paid Time Off (PTO)
• Basic Life & Supplemental Life
• Health Savings Account, Flexible Spending and Dependent Care Flexible Spending Accounts
• Short-Term & Long-Term Disability
• Employee assistance program (EAP)
• Tuition Reimbursement, Personal Development & Learning Opportunities
• Skills Development & Certifications
• Professional Membership Reimbursement
• Employee Referral Program
• Competitive compensation plan
• Discretionary variable incentive bonuses based on factors such as individual performance, business unit performance, and/or the company’s performance

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level