Federal Security & Compliance Analyst II

CLEAR - Corporate•New York, NY

1d•$119,000 - $140,000•Onsite

About The Position

CLEAR is building THE secure identity company of the future. Our mission is to make experiences safer and easier—physically and digitally. With more than 38 million Members and a growing network of partners across the world, CLEAR's secure identity platform is transforming the way people live, work, and travel. Whether it’s at the airport, stadium, or throughout your everyday life, CLEAR unlocks the magic of frictionless experiences. We're looking for a Federal Security & Compliance Analyst II to support the security and compliance of CLEAR's federal products and services. As a member of the Security organization, you will partner with Engineering, Product, Infrastructure, and Security teams to maintain compliance with federal cybersecurity requirements and help ensure our products meet evolving government security standards.

Requirements

4+ years of experience in cybersecurity, governance, risk, compliance, or information assurance
2+ years of experience developing technical security documentation, including System Security Plans (SSPs), policies, procedures, risk assessments, and audit artifacts
2+ years of experience working with federal cybersecurity frameworks such as NIST SP 800-53, RMF, FedRAMP, or FISMA
Excellent code review skills and the ability to review application code, infrastructure configurations, and system architectures to identify security risks and recommend secure solutions
Experience supporting federal security compliance programs and continuous monitoring activities
Exceptional analytical, organizational, project management, and written communication skills
Effective communicator who can explain security concepts to technical and non-technical audiences and collaborate effectively across teams

Nice To Haves

Security certifications such as Security+, CAP, CISA, CISM, or CISSP are a plus

Responsibilities

Support the ongoing security and compliance of federal products and services through continuous monitoring and governance activities
Develop and maintain security documentation, including System Security Plans (SSPs), Plans of Action & Milestones (POA&Ms), policies, procedures, risk assessments, and supporting artifacts
Track security findings through remediation and validate evidence supporting closure
Partner with cross-functional teams to implement and maintain NIST SP 800-53 security controls
Review application code, infrastructure configurations, and system architectures to identify security risks and recommend secure solutions
Communicate security and compliance requirements to technical and non-technical stakeholders
Identify opportunities to improve security governance and compliance processes