Systems Analyst / Security Compliance Auditor

Axiom Consultants•Rockville, MD

1d•$90,000 - $110,000•Remote

About The Position

This junior role supports cybersecurity and compliance initiatives in a federal IT environment. It focuses on maintaining continuous compliance of IT systems, applications, and infrastructure with federal cybersecurity mandates, agency policies, and internal security standards. The analyst supports security audits and assessments, reviews policies and documentation, reports findings, and recommends ways to strengthen security controls and the organization's cybersecurity posture. The position is remote, with occasional on-site meetings at NOAA/NMFS offices in Silver Spring, Maryland. It includes work with federal cybersecurity and privacy requirements, including FISMA, NIST RMF, the Privacy Act, and agency-specific policies.

Requirements

Bachelor's degree in Information Technology, Cybersecurity, Computer Science, Information Systems, or a related field, or equivalent professional experience.
1–3 years of experience supporting IT systems administration, cybersecurity, security compliance, or audit activities.
Basic understanding of federal cybersecurity frameworks, including NIST RMF, FISMA, and security compliance standards.
Experience performing vulnerability assessments, system security reviews, or compliance audits.
Ability to analyze technical security findings and communicate recommendations clearly.
Strong written communication skills and experience preparing technical reports and documentation in Word or PowerPoint format.
Ability to work independently while collaborating effectively within a team environment.

Nice To Haves

Experience with JCAM, an application designed to help federal agencies streamline compliance, security, and authorization processes.

Responsibilities

Assist in developing and executing an IT security audit program covering systems, applications, and infrastructure.
Perform technical security assessments, configuration compliance reviews, and vulnerability assessments in accordance with federal security requirements.
Support continuous monitoring to ensure systems remain compliant with applicable cybersecurity regulations and security baselines.
Review IT security policies, procedures, and documentation for effectiveness and identify opportunities for improvement.
Recommend improvements to internal security controls and alignment with federal regulations, agency requirements, and industry best practices.
Maintain and update compliance documentation, security procedures, and audit artifacts.
Document audit findings and security assessment results in detailed reports for management review.
Identify security vulnerabilities, compliance gaps, and potential risks, and provide actionable remediation recommendations.
Track and follow up on remediation activities to support timely resolution of identified issues.
Support interpretation and application of federal cybersecurity compliance frameworks and standards, including FISMA, NIST RMF, the Privacy Act, and agency-specific cybersecurity and privacy policies.
Collaborate with internal teams to ensure security controls are implemented and maintained in accordance with federal standards.