cybersecurity compliance analyst

Leidos

<div>Description
The mission of the DHS Chief Information Security Officer Directorate (DHS CISOD) is to support the Department&rsquo;s implementation of all applicable regulatory requirements including the Federal Information Security Modernization Act of 2014 (FISMA), relevant Office of Management and Budget (OMB) Circulars, Executive Orders, Federal laws, directives, policies, and regulations. The DHS CISOD&rsquo;s mission is to also provide the Department of Homeland Security (DHS) a secure and trusted computing environment. The DHS CISOD assists in ensuring Department compliance with information security requirements. Information security is an essential business function, critical to enabling DHS to conduct its operations and deliver service to the public.
Leidos is seeking an experienced IV&amp;V Senior Analyst to support DHS CISOD in ensuring DHS-wide compliance with federal information security laws, regulations, mandates, and standards. The selected candidate will perform independent verification and validation activities over Component validation and remediation efforts, provide detailed analysis of security documentation and control implementations, and deliver actionable recommendations to support risk-informed decision making across the enterprise.
The IV&amp;V Senior Analyst will serve as a subject matter expert in cybersecurity compliance and control validation, working closely with DHS Components and government stakeholders to assess remediation packages, evaluate security documentation, monitor corrective actions, and help ensure the quality, consistency, and timeliness of IV&amp;V support provided to CISOD. This role requires strong familiarity with DHS cybersecurity processes, Risk Management Framework (RMF) requirements, and federal security guidance, as well as the ability to communicate technical findings clearly to both technical and non-technical audiences.
Primary Responsibilities:<ul><li>
Perform IV&amp;V testing and analysis over Component V&amp;V packages for remediated IT security controls, including review of supporting evidence, validation of testing adequacy, and identification of gaps or inconsistencies.</li><li>
Review Component-submitted remediation and validation documentation to determine compliance with DHS and federal cybersecurity requirements and provide clear, risk-based feedback.</li><li>
Track submitted V&amp;V packages through review and approval workflows, including coordination of CISOD and OCFO signatures and status updates for reporting purposes.</li><li>
Evaluate System Security Plans (SSPs), security authorization artifacts, and other system documentation to determine whether required controls have been properly implemented and documented across applicable system layers.</li><li>
Assist in performing Security Authorization Reviews for CFO-designated and ancillary systems, including analysis of control implementation statements, observations, and documentation sufficiency.</li><li>
Review Component IT commitment letters, provide comments, and monitor testing and passing status against stated commitments.</li><li>
Develop, maintain, and improve QA processes, checklists, traceability matrices, and standard guidance documents to enhance consistency and repeatability across IV&amp;V activities.</li><li>
Provide measurable data, status updates, and reporting inputs that support monthly IT audit reporting and executive-level visibility into remediation and compliance trends.</li><li>
Coordinate with government and contractor stakeholders to resolve issues, clarify findings, and improve the quality of Component submissions.</li><li>
Contribute to process improvements, GRC updates, and standardization efforts related to assessments, authorizations, and remediation validation activities.</li><li>
May provide guidance and mentoring to junior staff and support internal quality reviews as needed.</li></ul>
Primary Qualifications:<ul><li>
Must be able to obtain a DHS Security Clearance.</li><li>
Bachelor&rsquo;s degree and 8+ years of experience in IV&amp;V, cybersecurity compliance, RMF, security controls assessment, or a related information assurance/cybersecurity field; or Master&rsquo;s degree and 6+ years of relevant experience.</li><li>
Experience supporting DHS or other Federal cybersecurity compliance and assessment activities.</li><li>
Strong knowledge of NIST RMF, FISMA, FedRAMP, FIPS, NIST guidance, and applicable OMB and DHS cybersecurity policies and procedures.</li><li>
Experience reviewing security authorization documentation, remediation packages, SSPs, and control validation evidence.</li><li>
Ability to analyze technical documentation, identify compliance gaps, and provide practical, risk-based recommendations.</li><li>
Experience developing reports, metrics, and written products for government stakeholders.</li><li>
Strong written and verbal communication skills and the ability to work effectively in a collaborative, fast-paced environment.</li></ul>
If you're looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo &mdash; because the mission demands it. We're not hiring followers. We're recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We're already at step 30 &mdash; and moving faster than anyone else dares.<h2 class="jobSectionHeader">
Original Posting:</h2>
April 10, 2026 
For U.S. Positions: While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above.<h2 class="jobSectionHeader"> 
Pay Range:</h2>
Pay Range $92,300.00 - $166,850.00
The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.
About Leidos
Leidos is an industry and technology leader serving government and commercial customers with smarter, more efficient digital and mission innovations. Headquartered in Reston, Virginia, with 47,000 global employees, Leidos reported annual revenues of approximately $16.7 billion for the fiscal year ended January 3, 2025. For more information, visit www.Leidos.com.
Pay and Benefits
Pay and benefits are fundamental to any career decision. That's why we craft compensation packages that reflect the importance of the work we do for our customers. Employment benefits include competitive compensation, Health and Wellness programs, Income Protection, Paid Leave and Retirement. More details are available at www.leidos.com/careers/pay-benefits.
Securing Your Data
Beware of fake employment opportunities using Leidos&rsquo; name. Leidos will never ask you to provide payment-related information during any part of the employment application process (i.e., ask you for money), nor will Leidos ever advance money as part of the hiring process (i.e., send you a check or money order before doing any work). Further, Leidos will only communicate with you through emails that are generated by the Leidos.com automated system &ndash; never from free commercial services (e.g., Gmail, Yahoo, Hotmail) or via WhatsApp, Telegram, etc. If you received an email purporting to be from Leidos that asks for payment-related information or any other personal information (e.g., about you or your previous employer), and you are concerned about its legitimacy, please make us aware immediately by emailing us at LeidosCareersFraud@leidos.com.
If you believe you are the victim of a scam, contact your local law enforcement and report the incident to the U.S. Federal Trade Commission.
Commitment to Non-Discrimination
All qualified applicants will receive consideration for employment without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, or any other basis prohibited by law. Leidos will also consider for employment qualified applicants with criminal histories consistent with relevant laws.</div>

IV&V Senior Analyst

Blackpoint Cyber

<div>Blackpoint Cyber is the leading provider of world-class cybersecurity threat hunting, detection and remediation technology. Founded by former National Security Agency (NSA) cyber operations experts who applied their learnings to bring national security-grade technology solutions to commercial customers around the world, Blackpoint Cyber is in hyper-growth mode, fueled by a recent $190m series C round.
What You&rsquo;ll Do
We are looking for a motivated Security Compliance Analyst to help lead our evolving internal security compliance program. As a member of the Internal Security Team, you work closely with the Director of Internal Security Compliance on maintaining and continuously improving our compliance initiatives.
This role requires deep knowledge of US and international security and privacy frameworks and regulations and a strong foundation in cyber security, and security compliance management. You&rsquo;ll play a key role in building organizational resiliency by refining security policies, conducting internal audits, and helping to drive the resolution of compliance gaps.
Day to day, you will:<ul><li>Support the maintenance of a comprehensive security compliance program aligned with laws, regulations, and industry best practices. This includes framework and control mapping, refining policies, standards, and procedures, and continuous monitoring of control compliance.</li><li>Maintain and optimize key programs like Third Party Risk Management and Security Awareness Training.</li><li>Apply expertise in GDPR, HIPAA, PCI DSS, NIST 800-171/CMMC, ISO 27001, SOC2, and FedRAMP controls as well as U.S. state privacy regulations to ensure practices remain compliant and up to date.</li><li>Support internal audits, partnering with stakeholders to remediate findings.</li><li>Support external audits (e.g., SOC 2) through preparation and planning, monitoring and remediation coordination, documentation and follow-up tracking.</li><li>Bring a structured, methodical approach to assisting with cross-functional project implementation.</li><li>Stay current on emerging threats, regulations, and security best practices to strengthen compliance posture.</li></ul>
What You&rsquo;ll Bring:<ul><li>Bachelor&rsquo;s degree (or equivalent experience) in IT, Information Security, Computer Science, Information Systems Management, Privacy, Law, Compliance, or related field.</li><li>Minimum 5 years of experience in privacy, security, or security compliance roles, including experience with internal audit.</li><li>Strong verbal and written communication, organizational, and documentation skills. Experience working with Atlassian Suite tools for collaboration and task management.</li><li>Deep knowledge of regulatory and compliance frameworks, including SOC2, ISO 27001, GDPR, NIS2, CMMC, FedRAMP, HIPAA, PCI DSS.</li><li>Strong analytical and problem-solving abilities with strong attention to detail.</li><li>Proven ability to work with multiple stakeholder groups, coordinating as needed, and supporting the integration of compliance into business processes.</li><li>Hands-on experience with framework and control mapping, compliance automation tools (One Trust Certification Automation, DRATA, and others), and third-party risk management (TPRM) tools.</li><li>Solid understanding of compliance risk, including implementing compensating controls and translating risk assessments for technical and non-technical audiences.</li><li>Experience working in remote or distributed environments.</li><li>Relevant professional certifications are preferred, such as CISA, CIPP/US, CIPP/E, CIPM, or CIPT</li></ul>
Blackpoint Cyber welcomes and encourages applications from qualified individuals of all races, colors, religions, sex, sexual orientation, gender identity or expression, national origin, age, marital status, or any other legally protected status. We are committed to equality of opportunity in all aspects of employment. For eligible employees in the US, Blackpoint offers competitive Health, Vision, Dental, and Life Insurance plans, a robust 401k plan, Discretionary Time Off, and other minor perks.
Compensation Range: $115K - $125K</div>

Security Compliance Analyst

Xcelerate Solutions

<div>Description 
 
 
 
As a Vision, Mission, and Driven company, VMD has been delivering information technology solutions to the Federal government in Agile Engineering, Cybersecurity, and Critical Infrastructure Protection since 2002. Our mission has now expanded, and we have merged with Xcelerate Solutions to revolutionize end-to-end enterprise security. Together we are committed to protecting our nation&rsquo;s citizens, critical infrastructure, and resources. 
 
Why Join VMD Corp? 
At VMD, now a part of Xcelerate Solutions, you have the opportunity to thrive in your career and become a Game Changer. The quality and talent of our people is what drives our success. We embrace an employee-first culture and make it a priority to provide professional development opportunities that foster career growth. 
 
We help protect American Citizens and the nation&rsquo;s most critical infrastructure by working alongside our customers and delivering game changing solutions to strengthen their missions. We believe our passion and commitment to achieving our customers' goals and solve their most critical challenges defines who we are. We don&rsquo;t just dream big, we act on it &ndash; through teamwork, dedication, and resilience. 
 
Your Impact to the Mission: 
As a Senior Cybersecurity and IT Assessor, you will support a government cybersecurity assessment and oversight program focused on strengthening enterprise security governance, operational resilience, and mission assurance. In this role, you will serve as an independent assessor responsible for evaluating the deployment, effectiveness, and operational maturity of cybersecurity implementations across government systems, enterprise platforms, cloud environments, and security programs, ensuring compliance with applicable federal requirements, mandates, and laws You will support the continued evolution of the assessment program through the development of maturity models, assessment methodologies, and process documentation, while collaborating with a team of assessors to foster a culture of knowledge sharing, continuous improvement, and technical excellence. 
Responsibilities:
<ul><li>Conduct in-depth technical, operational, and programmatic inspections, assessments, and audits of agency systems, applications, and enterprise services.</li><li>
Provide task leadership, work allocation, and mentorship to team members across assigned assessments; perform quality assurance reviews of deliverables; and ensure the timely, accurate completion of assessment activities and associated reporting milestones.</li><li>
Collect, analyze, and present accurate, risk-informed IT and cybersecurity technical and programmatic information.</li><li>
Support the maturation and continuous improvement of the cybersecurity assessment program, partnering closely with federal leadership and staff to strengthen methodologies, governance processes, reporting standards, and enterprise assessment capabilities.</li><li>
Develop, document, and maintain program processes, procedures, standards, and assessment methodologies</li><li>
Support enterprise strategic planning and program oversight initiatives, including cybersecurity capability roadmaps, governance enhancements, performance measures, and long-range modernization objective to strengthen cybersecurity posture, operational maturity, and implementation effectiveness.</li><li>
Provide executive-level input on program status, risk posture, performance metrics, and trend analysis, including the identification of recurring findings, systemic gaps, and strategic improvement opportunities.</li><li>
Obtain and maintain DOE Derivative Classifier certification(s) as required to support mission and program responsibilities.</li><li>
Maintain required professional certifications through continuous professional education (CPE) and ongoing professional development, while remaining current on emerging threats, evolving technologies, federal mandates, and cybersecurity best practices.</li></ul> 
 
Minimum Requirements:<ul><li>
Bachelor&rsquo;s degree in Cybersecurity, Information Technology, Computer Science, Engineering, or a related discipline, with 10+ years of relevant professional experience, including 8+ years of dedicated cybersecurity experience. Additional directly related experience may be substituted for the degree requirement.</li><li>
At least one DoD 8570 / 8140 compliant certification at the IAT Level III or IAM Level III level, such as CISSP, CISM, CASP+, CISA, GSLC, or GCIH.</li><li>
Demonstrated expert-level experience leading and conducting IT and cybersecurity inspections, independent assessments, compliance reviews, and audit activities.</li><li>
Deep working knowledge of federal cybersecurity requirements, mandates, and compliance frameworks, including FISMA, NIST SP 800-37, NIST SP 800-53, NIST SP 800-115, CNSSI 1253, and applicable OMB policies and memoranda.</li><li>
Exceptional verbal and written communication skills, with the ability to clearly and professionally engage with senior stakeholders, customers, technical teams, and executive leadership.</li><li>
Active or current DOE Q Clearance or Top Secret clearance with SCI eligibility, and the ability to successfully obtain and maintain a polygraph, as required.</li><li>
U.S. Citizenship required.</li></ul> 

Desired Qualifications and Skills:<ul><li>
Demonstrated subject matter expertise in federal cybersecurity baseline requirements, with preferred experience supporting Department of Energy (DOE) environments, directives, and mission systems.</li><li>
Strong knowledge of organizational maturity assessment models, particularly those used to evaluate cybersecurity, information technology, and enterprise risk management capabilities.</li><li>
Exceptional written communication skills, including proven experience developing cybersecurity policies, standards, procedures, implementation guidance, and process documentation for technical and executive stakeholders.</li><li>
Hands-on experience in secure configuration management and system hardening, including application, validation, and tailoring of appropriate DISA STIGs, CIS benchmarks, and other secure baseline standards across enterprise environments.</li><li>
Demonstrated experience securing cloud environments, including implementation and assessment of secure configurations across AWS, Azure, or hybrid federal cloud platforms.</li><li>
Working knowledge of Zero Trust principles, architectures, and maturity frameworks, with experience evaluating or supporting implementation aligned to federal Zero Trust strategies.</li><li>
Experience supporting enterprise vulnerability management programs, including demonstrated proficiency with Tenable Security Center / Tenable.sc, vulnerability analysis, prioritization, and remediation validation workflows.</li><li>
Prior experience serving in an Information System Security Manager (ISSM) or equivalent cybersecurity leadership role, with responsibility for governance, risk oversight, and enterprise security program execution.</li></ul> 
 
The Ideal Candidate Will Excel By Demonstrating<ul><li>
A high level of initiative, professionalism, and self-motivation, with the ability to independently drive complex cybersecurity assessment activities to completion.</li><li>
Exceptional attention to detail.</li><li>
A commitment to continuous learning, with the ability to remain current on emerging cybersecurity technologies, threat trends, assessment methodologies, and federal security mandates.</li><li>
Strong written and verbal communication skills, including the ability to translate technical findings into clear, actionable guidance.</li><li>
Natural leadership and team influence, with the ability to lead assessment efforts and facilitate stakeholder engagement.</li></ul> 
 
Travel and Telecommuting:<ul><li>
Travel: Significant (between 25%-75%)</li><li>
Telecommute Options: Remote, with frequent travel. Work will be conducted at various sites across the continental US. Position will be remote when not traveling.</li></ul> 
 
Xcelerate Solutions and its subsidiaries are Equal Employment Opportunity/Affirmative Action Employers. We evaluate qualified applicants without regard to race, color, national origin, religion, age, equal pay, disability, veteran status, sex, sexual orientation, gender identity, genetic information, or expression of another protected characteristic. As part of this commitment to the full inclusion of all qualified individuals, Xcelerate provides reasonable accommodations if needed because of an applicant's or an employee's disability. Xcelerate Solutions maintains a drug-free workplace.</div>

Senior Cybersecurity and IT Assessor

<div>Description
Key Responsibilities<ul><li>
Support Information Assurance (IA) and cybersecurity processes across system lifecycles</li><li>
Implement and maintain RMF-based A&amp;A activities, including legacy DIACAP where applicable</li><li>
Develop and maintain ATO packages, including artifacts and traceability documentation</li><li>
Evaluate and validate security controls and solutions for compliance with DoD requirements</li><li>
Utilize IA tools such as eMASS and ACAS to support authorization and continuous monitoring</li><li>
Ensure systems comply with security policies, STIGs, and configuration management processes</li><li>
Monitor and maintain the operational security posture of assigned systems</li><li>
Support change management and configuration control to ensure continued compliance</li><li>
Assist in developing and implementing system security policies and procedures</li><li>
Coordinate cybersecurity activities supporting mission and command objectives</li></ul>
Required Qualifications<ul><li>
Bachelor's and 2 years of relevant experience. Additional years of experience are accepted in lieu of degree.</li><li>
DoD 8570.01-M / 8140 compliant certification (e.g., Security+, CISSP, or equivalent)</li><li>
Minimum 3 years of experience in Cybersecurity, Engineering, Test &amp; Evaluation (T&amp;E), or A&amp;A/C&amp;A</li><li>
Working knowledge of RMF and/or experience with DIACAP</li><li>
Experience with IA tools such as eMASS and ACAS</li><li>
Familiarity with ATO documentation, security artifacts, and traceability requirements</li><li>
Ability to assess systems for compliance with classified processing requirements</li><li>
Must have active DoD Secret clearance or higher.</li><li>
Must be able to report daily to office in Quantico, VA.</li></ul>
Preferred Qualifications<ul><li>
IAT Level III certification</li><li>
Navy Qualified Validator (NQV) certification or ability to obtain</li><li>
Experience supporting Operational Technology (OT) or control systems A&amp;A</li><li>
5+ years of experience in A&amp;A / RMF environments</li><li>
Experience in DoD or USMC cybersecurity operations</li><li>
Clearance Requirement</li><li>
Active TS/SCI clearance</li><li>
Work Location</li></ul>
On-site: Marine Corps Base Quantico, VA
If you're looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo &mdash; because the mission demands it. We're not hiring followers. We're recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We're already at step 30 &mdash; and moving faster than anyone else dares.<h2 class="jobSectionHeader">
Original Posting:</h2>
April 9, 2026 
For U.S. Positions: While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above.<h2 class="jobSectionHeader"> 
Pay Range:</h2>
Pay Range $69,550.00 - $125,725.00
The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.
About Leidos
Leidos is an industry and technology leader serving government and commercial customers with smarter, more efficient digital and mission innovations. Headquartered in Reston, Virginia, with 47,000 global employees, Leidos reported annual revenues of approximately $16.7 billion for the fiscal year ended January 3, 2025. For more information, visit www.Leidos.com.
Pay and Benefits
Pay and benefits are fundamental to any career decision. That's why we craft compensation packages that reflect the importance of the work we do for our customers. Employment benefits include competitive compensation, Health and Wellness programs, Income Protection, Paid Leave and Retirement. More details are available at www.leidos.com/careers/pay-benefits.
Securing Your Data
Beware of fake employment opportunities using Leidos&rsquo; name. Leidos will never ask you to provide payment-related information during any part of the employment application process (i.e., ask you for money), nor will Leidos ever advance money as part of the hiring process (i.e., send you a check or money order before doing any work). Further, Leidos will only communicate with you through emails that are generated by the Leidos.com automated system &ndash; never from free commercial services (e.g., Gmail, Yahoo, Hotmail) or via WhatsApp, Telegram, etc. If you received an email purporting to be from Leidos that asks for payment-related information or any other personal information (e.g., about you or your previous employer), and you are concerned about its legitimacy, please make us aware immediately by emailing us at LeidosCareersFraud@leidos.com.
If you believe you are the victim of a scam, contact your local law enforcement and report the incident to the U.S. Federal Trade Commission.
Commitment to Non-Discrimination
All qualified applicants will receive consideration for employment without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, or any other basis prohibited by law. Leidos will also consider for employment qualified applicants with criminal histories consistent with relevant laws.</div>

Information System Security Specialist

New Directions Technologies, Inc.

<div><div><div><div>Location:
</div></div> 
<div><div>China Lake, CA</div>
</div> 
<div><div>Status:
</div></div> 
<div><div>Full Time</div>
</div> 
<div><div>Job Description:
</div></div> 
<div><div>Job Summary: Daily tasks include but are not limited to: 
 
Execute and oversee RMF Documentation and Compliance: Review the accuracy and traceability of all A&amp;A documentation within eMASS to support timely system authorization. 
 
Review documentation to ensure full compliance with cybersecurity policies and standards (DoD, DoW, DoN, and RMF). 
 
Conduct security control assessments and validations of a system's technical and non-technical security features to mitigate known threats and vulnerabilities effectively. These assessments should comprehensively identify and assess impacts while also taking into account existing risk mitigation strategies. 
 
Ensure the completion of all necessary RMF products and reporting in accordance with policy and in collaboration with the Security Control Assessor. 
 
Assist in updating any documentation related to risk assessments (such as Risk Assessment Reports, Plan of Actions &amp; Milestones, etc.) based on the results of assessments. 
 
Conduct the necessary vulnerability analysis to facilitate the mitigation and determination of residual risk as required. 
 
Provide support for the continuous monitoring program as needed, especially when System Level Continuous Monitoring results are essential to meet ongoing authorization requirements. 
 
Assist in contingency planning, testing, and execution as necessary. 
 
Support the incident response process and actively participate in meetings with the program team, offering updates on project status. 
 
Applicant should possess a strong understanding of the RMF process, as well as a working knowledge of eMASS, eMASSter, STIG Viewer, SCAP Compliance Checker (SCC), VRAM, and Visio applications. 
 
Excellent written and verbal communication skills, with an ability to clearly report on technical findings to both technical and non-technical stakeholders. 
 
Ability to work independently and manage multiple tasks in a fast-paced environment. 
Education/Experience: 
 
Due to the sensitive nature of the work, U.S Citizenship is required. 
 
Must be able to obtain and/or maintain a Security Clearance for duration of employment. 
 
Prior experience supporting Navy-specific systems or enterprise networks. 
</div>
</div> 
<div><div>Education and Work Experience Requirements:
</div></div> 
<div><div>Due to customer requirements, U.S Citizenship is required. 
 
Must be able to obtain and maintain a DoW Security Clearance for duration of employment.
 
 
BS - Computer Science or other technical field with a minimum of 4 yrs relevant work experience 
or 6 yrs relevant work experience in the planning, implementation, upgrading, and/or monitoring of security measures which make up the protection of corporate or government computer networks.
 
 
Capable of performing independently. 
 
IAM Level II certificate or higher (CAP, CASP+CE, CCISO, CISM, CISSP, GSLC, HCISPP) required. 
 
Salary: For Contract LCAT purposes the expected pay range for this position varies (possible $114,400 to $133,120) but is subject to change with experience and educational levels.
</div></div> 
<div><div>Security Clearance:
</div></div> 
<div><div>Secret</div></div></div></div>

IT Analyst (Validator, KTR-26-005)

Accenture

<div>Cybersecurity GRC (Strategy) Intern<h2 class="jobSectionHeader">
Location</h2>
Riyadh, Saudi Arabia<h2 class="jobSectionHeader">
Internship Overview</h2>
We are looking for a motivated and detail‑oriented Cybersecurity GRC (Strategy) Intern to join our Governance, Risk, and Compliance team. This internship is designed to provide exposure to cybersecurity strategy, risk management, regulatory compliance, and security governance activities. The intern will work alongside experienced GRC and cybersecurity professionals and gain practical experience supporting strategic and advisory cybersecurity initiatives.<h2 class="jobSectionHeader">
Key Responsibilities</h2><ul><li>
Support cybersecurity risk assessments, including identifying risks, documenting findings, and tracking remediation actions.</li><li>
Assist in reviewing and maintaining cybersecurity policies, standards, and procedures.</li><li>
Support compliance and self‑assessment activities against cybersecurity frameworks and regulations (e.g., NCA, NIST, ISO 27001).</li><li>
Assist with third‑party risk management activities, including documentation reviews and risk tracking.</li><li>
Support preparation for internal and external audits by collecting evidence and maintaining compliance documentation.</li><li>
Assist in maintaining risk registers, compliance trackers, and governance dashboards.</li><li>
Conduct research on cybersecurity regulations, best practices, and emerging governance trends.</li><li>
Support reporting and presentations related to cybersecurity posture, risks, and compliance status.</li></ul><h2 class="jobSectionHeader">
Required Qualifications</h2><ul><li>
Currently pursuing or recently completed a Bachelor&rsquo;s degree in Cybersecurity, Information Technology, Information Systems, or a related field.</li><li>
Basic understanding of cybersecurity governance, risk, and compliance concepts.</li><li>
Familiarity with cybersecurity frameworks or standards such as NIST, ISO 27001, or NCA.</li><li>
Strong analytical, documentation, and organizational skills.</li><li>
Good written and verbal communication skills in English (Arabic is a plus).</li><li>
Ability to work in a structured, detail‑oriented, and documentation‑focused environment.</li></ul><h2 class="jobSectionHeader">
Preferred / Nice‑to‑Have</h2><ul><li>
Exposure to cybersecurity risk assessments, compliance reviews, or audit activities.</li><li>
Familiarity with Saudi cybersecurity regulations (e.g., NCA, NDMO).</li><li>
Experience with documentation, reporting, or policy writing.</li><li>
Participation in cybersecurity projects, internships, or academic research related to GRC.</li><li>
Entry‑level certifications or coursework in progress (e.g., ISO 27001, GRCP, Security+).</li></ul><h2 class="jobSectionHeader">
What You&rsquo;ll Gain</h2><ul><li>
Hands‑on experience in cybersecurity governance, risk, and compliance activities.</li><li>
Exposure to cybersecurity strategy and advisory‑focused work.</li><li>
Practical understanding of regulatory and compliance‑driven cybersecurity environments.</li><li>
Experience working with risk registers, policies, and compliance artifacts.</li><li>
Strong foundation for future roles such as Cybersecurity GRC Analyst, Cyber Strategy Analyst, or Risk &amp; Compliance Analyst.</li></ul></div>
 
.

Cyber Security New Associate (KSA COOP Internship)

Prana Comunicación

<div>
 
 Redstone Arsenal/Huntsville, AL
 
 
 
 IPT Associates (IPTA) is passionate about providing our customers with technical solutions that satisfy their business needs. Through collaborative interactions with customers, team members, subject matter experts (SMEs), technical leaders, and partners we design practical solutions that solve real problems for major government and business organizations. As a member of our Aviation and Missile Center (AvMC) Team, you will work with a team of technologists focused on delivering innovative business solutions using emerging technologies through proven successful methods.
 
 
 
 Our Team
 
 
 
 IPTA seeks talented people who are enthusiastic about applying technology to deliver innovative outcomes with "fierce determination, fearless integrity, and passionate service." Our belief is that our people are the key to success. By encouraging and enabling continued learning, our team members grow to achieve their personal career goals. We are looking for:
 
 
 <ul>
 <li>
 Smart people with a passion for technology
 </li>
 <li>
 Ability to solve challenging technical business problems
 </li>
 <li>
 Self-directed professionals
 </li>
 <li>
 Hunger to continually learn and grow
 
 
 </li>
 </ul>
 
 Job Description
 
 
 
 Manage classified and unclassified systems through the Assessment &amp; Authorization (A&amp;A) process, performing the steps of Risk Management Framework in accordance with NIST SP 800-37r2. Coordination with Information System Owners (ISOs) to complete system categorization, select security controls, and perform self-assessments. Utilize the (RMF) Enterprise Mission Assurance Support Service (eMASS) to create packages, upload artifacts, select security controls, and produce implementation plans. Research, develop, implement, test, and review an organization's information security to protect information systems. Identify organization project's risks, prioritize those risks, mitigate risk, and present unmitigated risks to leadership. Research and present the information necessary to maintain security through risk mitigation. Review systems to identify potential security weaknesses, recommend improvements, implement and document changes.
 
 
 
 Responsibilities
 
 
 
 <ul>
 <li>
 Produce eMASS documentation
 </li>
 <li>
 Auditing and reporting of FISMA and NIST 800-53 compliance (cybersecurity compliance)
 </li>
 <li>
 Prepare documentation from information obtained from customer using accepted guidelines such as RMF (Risk Management Framework)
 </li>
 <li>
 RMF package development and review
 </li>
 <li>
 Risk and vulnerability self-assessments and corrective actions
 </li>
 <li>
 Provide assessment and authorization (A&amp;A) support in the development of security and contingency plans
 </li>
 <li>
 Continuous monitoring and reporting of cyber threats, vulnerabilities, and risks
 
 
 </li>
 </ul>
 
 Requirements
 
 
 
 <ul>
 <li>
 Bachelor's degree in a related field
 </li>
 <li>
 Three (3) years of prior experience in a similar role
 </li>
 <li>
 Strong communication and organizational skills
 </li>
 <li>
 DoD 8570 Level II/III certification desired
 </li>
 <li>
 Active Security clearance required
 
 
 </li>
 </ul>
 IPTA is an Equal Opportunity/Affirmative Action employer.  We are committed to providing equal employment opportunity to all qualified employees and applicants for employment.  The Company does not discriminate in employment opportunities or practices on the basis of race, color, religion, sex, sexual orientation, national origin, age, physical disability, mental disability, medical condition, status as a veteran or disabled veteran or any other characteristic protected by law.  We base all employment decisions, including recruitment, selection, training, compensation, benefits, discipline, promotions, transfers, lay-offs, returns from lay-off, terminations, and social and recreational programs on the principles of equal employment opportunity.
 
 
 #clearance
</div>

Information Systems Security Officer (ISSO) (Junior)

Search 10000+ Cybersecurity compliance analyst jobs near you this April. New roles added regularly across leading industries. Apply today.