Federal Security & Compliance Analyst II

📋 Description

• Support federal product security and compliance via monitoring and governance
• Develop/maintain security docs (SSP, POA&Ms, policies, risk)
• Track findings through remediation and validate closure evidence
• Collaborate to implement NIST SP 800-53 controls and review security
• Communicate security/compliance requirements to technical and non-technical audiences
• Identify opportunities to improve governance and compliance processes

🎯 Requirements

• 4+ years in cybersecurity, governance, risk, or information assurance
• 2+ years drafting technical security docs (SSP, policies, risk, audits)
• 2+ years with NIST SP 800-53, RMF, FedRAMP, or FISMA
• Strong code review to spot security risks in code/configs/architecture
• Experience supporting federal security programs and continuous monitoring
• Excellent analytical, organizational, PM and written skills
• Effective communicator with technical/non-technical audiences
• Security certs such as Security+, CAP, CISA, CISM, or CISSP are a plus

🎁 Benefits

• Comprehensive healthcare plans
• Fertility and adoption/surrogacy support
• Flexible time off
• Wellness stipend
• Free OneMedical memberships for you and dependents
• CLEAR Plus membership
• 401(k) with employer match