Security & Compliance Analyst

ASSYST, Inc.•Sterling, VA

10d•Onsite

About The Position

ASSYST is seeking a Security & Compliance Analyst to support cybersecurity, risk management, compliance, and security operations activities. This is an onsite position based in Sterling, VA. The analyst supports security and compliance assessments and audits, monitors security controls and requirements, assists with vulnerability management and remediation, and maintains security documentation and compliance evidence. The role also supports implementation of security controls aligned with applicable frameworks, security incident documentation and escalation, and review of security logs, alerts, and reports.

Requirements

1–3 years of professional experience in cybersecurity, information security, IT compliance, risk management, or a related field.
U.S. Citizenship and the ability to obtain and maintain a U.S. Government security clearance.
Bachelor’s degree in Cybersecurity, Information Security, or a related discipline.
Understanding of cybersecurity principles, security controls, vulnerabilities, and risk management.
Familiarity with NIST Cybersecurity Framework, NIST 800-53, FISMA, CIS Controls, or similar standards.
Basic understanding of network security, endpoint security, identity and access management, and vulnerability management.
Strong analytical, documentation, communication, and problem-solving skills.

Nice To Haves

CompTIA Security+ or Network+ certification (listed as preferred/required).
Experience supporting Federal, State, or other highly regulated environments.

Responsibilities

Support security and compliance assessments, audits, and risk management activities.
Monitor and evaluate security controls, policies, procedures, and compliance requirements.
Assist with vulnerability management, security assessments, and remediation tracking.
Maintain security documentation, policies, procedures, risk registers, and compliance evidence.
Support implementation and monitoring of security controls aligned with NIST, FISMA, CIS, or other applicable frameworks.
Assist with security incident documentation, investigation, and escalation.
Review system logs, security alerts, vulnerability reports, and other security information.
Track identified security weaknesses and work with technical teams to support timely remediation.