Senior Security & Compliance Analyst - Advanced
TechArmy•Tallahassee, FL
•Onsite
About The Position
The Senior Security & Compliance Analyst will provide a range of activities and tasks related to information security and compliance. This role requires a strong understanding of IT systems, security principles, and regulatory requirements. The analyst will be responsible for policy development, risk assessments, audit support, and hands-on security operations. The position is primarily on-site with occasional remote work possible with approval, and travel costs will not be reimbursed.
Requirements
- A minimum of four (4) years of combined IT and security work experience with a broad range of exposure to systems analysis, applications development, and database design and administration.
- One to two (1–2) years of experience with information security, and knowledge of security issues, techniques, and implications across all existing computer platforms.
- Minimum of seven (7) years across information security disciplines, with demonstrated experience in both security governance/compliance (GRC) and hands-on security operations.
- Demonstrated experience drafting information security policy and standards.
- Demonstrated experience implementing NIST SP 800-53 and/or NIST CSF controls.
- Demonstrated experience performing security risk assessments.
- Demonstrated experience supporting internal or external audits.
- Bachelor's degree in computer science, information systems, cybersecurity, or a related field, or equivalent work experience.
- At least one current industry certification from the following: CISA, CRISC, CGRC, CISM, CISSP.
Nice To Haves
- Florida state government or public-sector information security experience.
- Working knowledge of Rule 60GG-2, F.A.C., and Section 282.318, Florida Statutes.
- CJIS Security Policy implementation or audit experience.
- HIPAA Security Rule and PHI-handling experience.
- Hands-on Microsoft 365 G5, Microsoft Defender (Endpoint, Vulnerability Management), and Microsoft Purview experience.
- Vulnerability management tooling and remediation-coordination experience.
- Experience developing IAM / access-control standards and provisioning-integrity controls.
- PowerShell or comparable scripting for security automation and reporting.
Responsibilities
- Provide information security and compliance activities and tasks.
- Draft information security policy and standards.
- Implement NIST SP 800-53 and/or NIST CSF controls.
- Perform security risk assessments.
- Support internal or external audits.
- Engage in hands-on security operations.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
Upload and Match Resume
What This Job Offers
Job Type
Full-time
Career Level
Senior
