NISSC 3 Information Systems Security Analyst (Security & Regulation Compliance)

American Systems•Colorado Springs, CO

18h

About The Position

AMERICAN SYSTEMS is seeking an Information Systems Security Analyst (Security & Regulatory Compliance) with 7 - 10 years experience and a TS/SCI Clearance to support The North American Aerospace Defense Command (NORAD), Cheyenne Mountain Complex (NCMC) -Integrated Tactical Warning/Attack Assessment (NCMC-ITW/AA) and Space Support Contract III Mission. Responsibilities Implement and maintain information security practices, including execution of risk assessments, vulnerability and incident response, compliance tracking, system documentation, and regular production/submission of security event reports, plans, and artifacts. Support secure handling and storage of classified/unclassified materials and user access provisioning, monitor POA&M tracking, and coordinate compliance audits and readiness activities. Lead or support training and process improvement efforts, ensuring protection of sensitive data, improvement of security practices, and overall compliance with DoD policy and contract requirements. Developing and maintaining compliance programs. Conducting audits and assessments. Monitoring compliance with industry standards such as GDPR, HIPAA, PCI-DSS, etc. Preparing documentation for regulatory bodies. Training staff on compliance requirements. #NISSC #LI-EW1 Qualifications Education: Bachelors in IT, Cyber, CS, IS, Data Science, or SW Engineering OR equivalent DoD/Military training Clearance: Top Secret / SCI Certifications: CCSP, Cloud+, CSC, GCLD, GSEC, and/or SecurityX/CASP+ certification. Experience: 7-10 Years Expertise in cybersecurity and information assurance principles, with demonstrated ability to implement, monitor, and assess security compliance through vulnerability scans, risk assessments, and incident response. Proficient in coordinating risk management certifications, incident response strategies, security documentation, artifact tracking, and compliance reporting. Skilled in user access provisioning, secure material handling and storage, audit facilitation, and regular production/submission of security plans and reports. Experience leveraging cybersecurity and security management tools such as eMASS, XACTA, CORE, ACAS, SCAP tools, Nessus, Checkmarx, and ZAP DAST. Notice of Anticipated Employment Opportunities These positions are being posted in anticipation of future employment opportunities, which may become available beginning around June 2026. There is no guarantee of employment or a specific start date; actual hiring and start dates will depend on organizational needs and other factors. Candidates may be considered for these or similar positions as opportunities arise. Pay Transparency Statement AMERICAN SYSTEMS is committed to pay transparency for our applicants and employee-owners. The salary range for this position is USD $113,400.00/Yr. - USD $189,300.00/Yr. Actual compensation will be determined based on several factors permitted by law. AMERICAN SYSTEMS provides for the welfare of its employees and their dependents through a comprehensive benefits program by offering healthcare benefits, paid leave, retirement plans, insurance programs, and education and training assistance. EEO Statement EEO Race/Sex/Disability Status/Veteran Status

Requirements

7-10 years experience
TS/SCI Clearance
Bachelors in IT, Cyber, CS, IS, Data Science, or SW Engineering OR equivalent DoD/Military training
CCSP, Cloud+, CSC, GCLD, GSEC, and/or SecurityX/CASP+ certification.
Expertise in cybersecurity and information assurance principles, with demonstrated ability to implement, monitor, and assess security compliance through vulnerability scans, risk assessments, and incident response.
Proficient in coordinating risk management certifications, incident response strategies, security documentation, artifact tracking, and compliance reporting.
Skilled in user access provisioning, secure material handling and storage, audit facilitation, and regular production/submission of security plans and reports.
Experience leveraging cybersecurity and security management tools such as eMASS, XACTA, CORE, ACAS, SCAP tools, Nessus, Checkmarx, and ZAP DAST.

Responsibilities

Implement and maintain information security practices, including execution of risk assessments, vulnerability and incident response, compliance tracking, system documentation, and regular production/submission of security event reports, plans, and artifacts.
Support secure handling and storage of classified/unclassified materials and user access provisioning, monitor POA&M tracking, and coordinate compliance audits and readiness activities.
Lead or support training and process improvement efforts, ensuring protection of sensitive data, improvement of security practices, and overall compliance with DoD policy and contract requirements.
Developing and maintaining compliance programs.
Conducting audits and assessments.
Monitoring compliance with industry standards such as GDPR, HIPAA, PCI-DSS, etc.
Preparing documentation for regulatory bodies.
Training staff on compliance requirements.