Security Compliance Analyst

Job not on LinkedIn

🔥 14 minutes ago

⚔️ Virginia – Remote

⚔️ Virginia – Remote

⏰ Full Time

🟢 Junior

🟡 Mid-level

🔐 Security Analyst

👻 Ghost score 10%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

ShorePoint Inc

WebsiteLinkedInAll Job Openings

1 - 10 employees

💼 Consulting

🏥 Healthcare

📦 Logistics

Consulting • Healthcare • Logistics

ShorePoint Inc. is a privately-held cybersecurity services company that aims to be the premier provider of cybersecurity services in today's rapidly evolving landscape. Founded by cybersecurity veterans, the company focuses on providing effective cyber defense strategies across the full cyber lifecycle. ShorePoint specializes in various areas including Continuous Diagnostics and Mitigation (CDM), threat protection, security compliance, and information protection. With a strong emphasis on supporting both public and private sector clients, the firm leverages its expertise to protect critical assets from cyber threats, fostering a collaborative and innovative corporate culture.

📋 Description

• Support the SIAM in executing the program’s information assurance and cybersecurity compliance strategy • Coordinate security documentation, control implementation, ATO and cATO activities with ISOs and ISSOs • Support FISMA compliance activities, annual self-assessments, security control assessments, and IG/OMB-driven audits • Develop, review, and maintain SSPs, SARs, POA&Ms, and RARs • Support RMF activities, including control selection, implementation tracking, assessment, and continuous monitoring • Track POA&M remediation activities and ensure findings are documented, assigned, and closed on time • Prepare materials and evidence packages for internal reviews, external audits, and compliance inspections • Support the compliance posture of ICAM systems and track policy, procedure, and control updates • Maintain continuous monitoring documentation and support monthly and quarterly compliance reporting • Participate in control assessments, walkthroughs, and stakeholder interviews • Maintain documentation repositories and audit trails for inspection readiness • Communicate compliance status, risks, and action items to the SIAM and program leadership

🎯 Requirements

• Bachelor’s degree in Cybersecurity, Information Technology, Information Systems, or a related field, or equivalent professional experience • 2+ years of experience in federal information security compliance, IT security, or a related field • Experience with Governance, Risk, and Compliance (GRC) tools such as Xacta, CSAM, RSA Archer or similar • Demonstrated experience supporting FISMA compliance activities and/or federal security audits • Experience collaborating with ISOs and/or ISSOs on system security documentation and A&A activities • Strong written and verbal communication skills • Strong organizational skills and attention to detail, particularly around documentation control and audit readiness • Ability to analyze complex requirements and translate them into clear, actionable tasks and processes • Must be a U.S. citizen • Eligible to obtain and maintain a Public Trust security clearance • Beneficial: experience supporting an ICAM program or similar identity governance initiative • Beneficial: familiarity with FICAM architecture, NIST SP 800-63 digital identity guidelines, or OMB M-19-17 or successor ICAM policy • Beneficial: relevant certifications such as CompTIA Security+, CAP, CISSP, or CISA • Beneficial: experience supporting continuous monitoring programs or cATO initiatives • Beneficial: prior experience in a federal contracting environment supporting a civilian or defense agency

🏖️ Benefits

• 144 hours of PTO • 11 holidays • 85% of insurance premiums covered • Healthcare coverage through major carriers • 401(k) • Continuing education • Certification maintenance and reimbursement • Career development opportunities • Technical and professional growth opportunities