Security & Compliance Analyst - Mid

Nalley Consulting•Doral, FL

1d•Onsite

About The Position

This position is for a Security & Compliance Analyst at Nalley Consulting, working with prime partners to staff Department of Defense and Intelligence Community positions. The role is located at SOUTHCOM HQ, Doral, FL, and requires an on-site presence at the U.S. Southern Command J2 office. The analyst will be responsible for ensuring compliance with DoD identity governance policies, regulatory frameworks, and cybersecurity best practices. This includes conducting security assessments and audits, maintaining essential security documentation, and providing oversight of security controls. The analyst will also produce a Security Compliance & Audit Report detailing compliance gaps, remediation actions, and assessment results.

Requirements

Possess the knowledge and capability to assess, implement, and monitor security compliance frameworks across cloud and hybrid environments, ensuring adherence to FedRAMP, NIST 800-53 Rev. 5, DoD RMF, and Zero Trust security principles.
Proficient in security risk assessment, compliance reporting, and vulnerability remediation strategies.
Demonstrated experience in conducting security assessments, preparing compliance documentation (SSPs, POA&Ms), and ensuring regulatory adherence for cloud and hybrid infrastructures.
Proficiency with compliance tools such as Microsoft Purview, AWS Security Hub, Nessus, or Splunk Enterprise Security is required.
Bachelor's degree in Cybersecurity, Information Assurance, or a related field, or five (5) years of equivalent experience in security compliance analysis.
Required clearance: TS/SCI

Nice To Haves

Certified Information Systems Auditor (CISA)
Certified Information Systems Security Professional (CISSP)
CompTIA Security+

Responsibilities

Ensure compliance with DoD identity governance policies, regulatory frameworks, and cybersecurity best practices.
Conduct security assessments and audits to verify adherence to NIST 800-53 Rev. 5, FedRAMP, DoD IL-4/IL-5 security mandates, and Risk Management Framework (RMF) guidelines.
Maintain System Security Plan (SSP), Security Assessment Reports (SAR), and other documentation supporting the Authority to Operate (ATO) process.
Provide oversight of security controls related to IAM, data protection, and cloud security configurations.
Produce the Security Compliance & Audit Report, documenting compliance gaps, remediation actions, and assessment results.