Cybersecurity Controls & Compliance Analyst

Edgewater Federal Solutions•Oak Ridge, TN

47d•Onsite

About The Position

This position supports the U.S. Department of Energy Office of Scientific and Technical Information (DOE OSTI) in its mission to ensure the long-term preservation and accessibility of DOE scientific and technical information. The role focuses on assessing cybersecurity controls, supporting audit readiness, and ensuring compliance with federal cybersecurity frameworks and OSTI’s internal policies. This role is primarily focused on compliance and documentation rather than hands-on technical work. This is onsite in Oak Ridge, TN.

Requirements

High school diploma required.
Minimum of 3 years’ experience in cybersecurity, audit, or compliance roles.
Possesses strong understanding of cybersecurity frameworks (e.g., NIST SP 800-53, FISMA, RMF), implementing and adapting them to specific organizational needs.
Performs risk assessments, identifies control gaps, and recommends strategic remediation efforts based on organizational risk appetite.
Supports audits, leads audit responses and compliance assessments, coordinates evidence collection, and develops corrective action plans in a federal or regulated environment.
Leverages SIEM tools (e.g., Splunk), vulnerability management, and control monitoring platforms.
Works independently and collaboratively across technical and non-technical teams.
Exhibits excellent analytical, documentation, and communication skills.
Detail-oriented with a commitment to quality assurance and continuous improvement.
Manages multiple projects and deadlines in a fast-paced environment.
Maintains a high level of initiative, customer service, and professional growth mindset.
Ability to sit for long periods.
Ability to view computer monitors for long periods.
Ability to provide proof of US Citizenship on your first day of employment to obtain a DOE HSPD-12 Badge in accordance with the terms of the contract.
Department of Energy OSTI's policy direction requires all employees employed on this contract to be citizens of the United States.

Nice To Haves

Prefer degree or coursework in cybersecurity, information assurance, audit, or related field.

Responsibilities

Evaluate and document the effectiveness of cybersecurity controls across OSTI’s network and systems.
Support internal and external audits, including evidence collection, control mapping, and remediation tracking.
Support and partner with stakeholders in conducting risk assessments and gap analyses to ensure alignment with NIST, FISMA, and DOE cybersecurity requirements.
Collaborate with system owners and technical teams to ensure security controls are implemented and maintained.
Monitor compliance with OSTI’s cybersecurity policies, procedures, and standards.
Maintain and update system security plans (SSPs), risk registers, and control documentation.
Assist in the development and refinement of cybersecurity governance processes.
Analyze security event data to identify control weaknesses and recommend improvements.
Support the implementation of continuous monitoring strategies and reporting mechanisms.
Coordinate with third-party cybersecurity teams and federal oversight bodies as needed.
Prepare technical documentation and compliance reports for internal and external stakeholders.
Stay current on cybersecurity regulations, audit trends, and best practices.
Assist with installation, configuration, and maintenance of security tools used for compliance monitoring.
Perform other duties as assigned.