Senior Cyber Security Analyst

TrellisWare Technologies•San Diego, CA

5d•$120,000 - $150,000•Onsite

About The Position

The Information Technology Team is seeking a Senior Cyber Security Analyst, Governance and Compliance. This role supports the organization’s cybersecurity program with a focus on governance, compliance, and control effectiveness across cloud and on premises environments. The Cyber Security Analyst, Governance and Compliance works with IT and Engineering teams to define security requirements, validate control implementation, and ensure policies, procedures, and evidence accurately reflect operational practices. Enhancing cohesiveness and maintaining team morale is a responsibility of all our team members, as is the ambition for self-improvement and talent development. Through this dedication to unity and professional advancement, each team member is directly impacting the successful outcome of TrellisWare’s deliverables and setting the tone for our core values of delivering excellence, pushing boundaries, and empowering people.

Requirements

Bachelor’s degree in Cybersecurity, Information Security, Information Technology, Computer Science, or a related field required.
Minimum of four (4) years of experience in a combination of risk management, information security, IT, and Cloud work experience.
CompTIA Security+ CE or ability to obtain within 6 months of start date.
Demonstrated knowledge of RMF, NIST, NISPOM, system audits, vulnerability scanning, and DCSA security package development.
Experience working with NIST based frameworks and supporting control implementation.
Working knowledge of security technologies sufficient to assess control effectiveness, interpret findings, and validate compliance evidence.
Ability to review, assess, and communicate vulnerability findings and remediation recommendations.
Strong collaborative drive and interpersonal skills.
Strong initiative, proactive work ethic and prioritization skills.
Trustable judgement and analytical problem-solving skills.
Effective execution and decision making.
Champion of change and promotes innovation.
Strong written and verbal communication skills.
Must be able to obtain and maintain an active Secret Clearance which requires U.S. Citizenship.

Nice To Haves

Experience supporting CMMC readiness or formal audits.
Prior experience in an ISSM or equivalent security governance role.
Experience presenting risk, findings, or security posture to leadership.
Security qualifications a bonus – CISSP, CISM.
Active or recent (within 2 years) Security Clearance a plus.

Responsibilities

Support cybersecurity operations through governance oversight, vulnerability result validation, and incident documentation.
Develop, maintain, and update security policies and procedures to ensure alignment with regulatory and operational requirements.
Evaluate implemented security controls, identify compliance gaps, and coordinate corrective actions with IT and Engineering to strengthen risk posture.
Manage audit readiness activities including evidence validation, organization, traceability, and direct support during formal assessments.
Track findings and remediation efforts through structured action plans and closure.
Participate in risk assessments and provide clear risk-based recommendations to leadership.
Support access control governance including least privilege and separation of duties.
Support security governance and compliance across cloud and on premises environments.
Maintain accurate documentation reflecting system configurations, ownership, and control implementation.
Ensure policies, procedures, and evidence accurately reflect operational practices and implemented controls.
Coordinate with IT, Engineering, Program Management, and Security leadership to ensure security initiatives are executed effectively.
Review and validate vulnerability and configuration assessment results to ensure findings are accurate, risk ranked, and mapped to applicable compliance controls.
Leverage ISSM aligned experience to support governance, audit preparation, and remediation tracking.
Support security awareness and training efforts aligned with organizational policies and procedures.
Performs other duties as assigned.