Information Technology Compliance Analyst

The IT Compliance Specialist will be instrumental in supporting our client's efforts to ensure compliance with Federal IT security regulations and standards. The ideal candidate will have a strong foundation in NIST 800 series Special Publications and other relevant IT security frameworks. This role requires a proactive approach to developing, updating, and maintaining IT compliance documentation and conducting thorough IT risk assessments and mitigation strategies.

Key Responsibilities:Develop and maintain IT compliance documentation.Perform comprehensive IT compliance and risk assessments, providing recommendations for corrective actions and follow-ups.Assist in conducting security control self-assessments, preparing System Security Plan documentation, and analyzing security control deficiencies.Engage in continuous monitoring activities, including recurring access reviews and security-related documentation preparation.Support ad hoc risk assessments and compliance reviews for software/hardware as needed.Optionally, participate in independent security controls testing, depending on skills and qualifications.

Qualifications:Bachelor’s degree in Information Technology, Information Security, Computer Science, or a related field.3-5 years of relevant experience in IT security or compliance.Strong working knowledge of NIST 800 series Special Publications and familiarity with FISMA or similar IT security programs.Experience with risk assessments, security planning, and testing and evaluation activities.Certification in a related technical discipline is desirable.

Skills:Excellent analytical and organizational skills.Ability to interpret and apply IT security policies and standards effectively.Strong communication skills, capable of working collaboratively with IT security teams and business units.Innovative, resourceful, and results-driven.