security compliance analyst

Chickasaw Nation Industries

<div><div><p>The <b>Cloud Assessment Analyst III </b>supports DoD and FedRAMP cybersecurity oversight for Cloud Service Offerings by performing Continuous Monitoring, Annual Assessments, and risk evaluations to ensure compliance with RMF and NIST 800-53 requirements. The role works closely with Cloud Service Providers and Authorizing Officials to review security controls, POA&amp;Ms, vulnerability data, deviation and change requests, and to produce risk summaries, reports, and briefings using eMASS and other GRC tools in a mission-critical, regulated environment.<br>
</p></div><p></p><div><p><b>Chickasaw Nation Industries, Inc. </b>serves as a holding company with multiple subsidiaries engaged in several lines of business (Technology, Infrastructure &amp; Engineering, Health, Manufacturing, Public Safety, Consulting, and Transportation) for the federal government and commercial enterprises. A portion of our profits is used to support Chickasaw citizens. We are proud to support the economic development and long-term viability of the Chickasaw Nation and its people. CNI offers premium benefits eligible on the first day of hire to full time employees; (Medical - Dental &ndash; Vision), Company Life Insurance, Short-Term and Long-Term Disability Insurance, 401(K) Immediate Vesting, Professional Development Assistance, Legal Aid Assistance Program, Family Planning / Fertility Assistance, Personal Time Off, and Observance of Federal Holidays.
</p><p></p><p>As a federal contractor, CNI is a drug-free workplace and adheres to the Federal Controlled Substance Act.<br>
</p></div><p></p><div><p><b>ESSENTIAL REQUIREMENTS
</b></p><ul><li><p>Have an active DoD Top Secret clearance with SCI eligibility
</p></li><li><p>DoD 8570 IAM/IA Technical (IAT) Level III certification
</p></li><li><p>Strong knowledge and hands-on experience with FedRAMP, NIST SP 800-53, DoD RMF, and related cybersecurity frameworks
</p></li><li><p>Proven experience working with Cloud Service Providers (CSPs) in a government or regulated environment
</p></li><li><p>Expertise in evaluating security control implementations, conducting Annual Assessments, reviewing POA&amp;Ms, deviation requests, and other artifacts related to risk posture
</p></li><li><p>Demonstrated experience using eMASS, and familiarity with other GRC tools used by DoD or federal agencies
</p></li><li><p>Solid understanding of vulnerability scanning tools, SIEM platforms, and security monitoring tools
</p></li><li><p>Strong analytical skills with the ability to interpret technical data and identify risks and mitigation strategies
</p></li><li><p>Excellent verbal and written communication skills to produce technical reports, risk summaries, and briefings for stakeholders including Authorizing Officials (AOs)
</p></li><li><p>Experience developing or maintaining Continuous Monitoring (ConMon) plans, reports, and dashboards
</p></li><li><p>Ability to work independently and collaboratively in a fast-paced, mission-critical environment
</p></li></ul></div><p></p><div><p><b>KEY DUTIES AND RESPONSIBILITIES
</b></p></div><div><p>Essential duties and responsibilities include the following. Other duties may be assigned.
</p></div><div><ul><li><p>Conducts thorough reviews and analyses of Deviation Requests including validations or justifications for security findings.
</p></li><li><p>Evaluates and develops Monthly One Pagers that summarize the cybersecurity posture of Cloud Service Offerings (CSOs)
</p></li><li><p>Performs Annual Assessments to validate the implementation of mandatory security controls across the CSO baseline and assess one-third of the remaining controls annually.
</p></li><li><p>Prepares and reviews weekly Playbooks to report on the Continuous Monitoring (ConMon) status of designated CSOs.
</p></li><li><p>Reviews and assesses Security Change Requests (SCRs) that propose new requirements or capabilities for CSOs.
</p></li><li><p>Analyzes scan data, Plans of Action and Milestones (POA&amp;Ms), and other change artifacts to assess ongoing risk posture changes of Cloud Service Providers (CSPs).
</p></li><li><p>Ensures the DoD and FedRAMP monitoring programs enable effective oversight of CSPs by providing risk-based data to inform Authorizing Officials (AOs).
</p></li><li><p>Performs ongoing assessments and validations to confirm that security controls are implemented and compliant with DoD and FedRAMP standards.
</p></li><li><p>Ensures effective operation of system safeguards and controls through a proactive, risk-based monitoring approach.
</p></li><li><p>Maintains continuous visibility into CSP applications and devices to support data-driven decision-making and adherence to authorized risk thresholds.
</p></li><li><p>Supports risk-based situational awareness for network security by conducting architectural reviews that expedite mitigation efforts.
</p></li><li><p>Integrates security and risk management processes to identify actionable items driven by threat and vulnerability assessments.
</p></li><li><p>Validates that CSPs regularly perform vulnerability scans as mandated by DoD and FedRAMP security control requirements.
</p></li><li><p>Recommends and oversees the submission and review of POA&amp;Ms, vulnerability scans, Playbooks, Change Requests, Deviation Reports, and Monthly One Pagers.
</p></li><li><p>Contributes to a leverage model that reduces government costs, time, and resources associated with ConMon for cloud systems.
</p></li><li><p>Conducts Annual Assessments in accordance with FedRAMP and DoD requirements.
</p></li><li><p>Provides comprehensive ConMon compliance assessments and risk analyses for each assigned CSO including input for annual reviews, extension and change requests, Binding Operational Directives (BODs), and Emergency Directives (EDs) supported by documentation, recommendations, reports, and briefings.
</p></li><li><p>Uploads all documentation or changes in control status related to ConMon activities into eMASS or a government-designated Governance, Risk, and Compliance (GRC) system.
</p></li><li><p>Documents ConMon standards and frameworks.
</p></li><li><p>Utilizes government-specified cybersecurity tools to support cyber compliance monitoring and maintenance.<br>
</p></li></ul></div><p></p><div><p><b>EDUCATION/EXPERIENCE REQUIRED
</b></p></div><div><p>Bachelor's degree (IT-related field preferred) and e ight (8) years of overall experience in cybersecurity or network security position; with at least 5 years in cloud security assessment or continuous monitoring roles.<br>
</p></div><p></p><div><p><b>PHYSICAL DEMANDS
</b></p></div><div><p>Work is primarily performed in an office environment. Regularly required to sit. Regularly required use hands to finger, handle, or feel, reach with hands and arms to handle objects and operate tools, computer, and/or controls. Required to speak and hear. Occasionally required to stand, walk and stoop, kneel, crouch, or crawl. Must frequently lift and/or move up to 10 pounds and occasionally lift and/or move up to 25 pounds. Specific vision abilities required by this job include close vision, distance vision, depth perception, and ability to adjust focus. Exposed to general office noise with computers printers and light traffic.<br>
</p></div><p></p><div><p>The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions of this job.<br>
</p></div><p></p><div><p><b>EOE including Disability/Vet
</b></p><p></p><p><b>The estimated pay range for this role is $96K to $110K, with the final offer contingent on location, skillset, and experience.
</b></p><p></p><p><b>CNI offers a comprehensive benefits package that includes:
</b></p><ul><li>Medical
</li><li>Dental
</li><li>Vision
</li><li>401(k)
</li><li>Family Planning/Fertility Assistance
</li><li>STD/LTD/Basic Life/AD&amp;D
</li><li>Legal-Aid Program
</li><li>Employee Assistance Program (EAP)
</li><li>Paid Time Off (PTO) &ndash; (11) Federal Holidays
</li><li>Training and Development Opportunities
</li></ul><p></p><p>Your application submission will be considered for all potential employment opportunities with Chickasaw Nation Industries (CNI).</p></div></div>

Cloud Assessment Analyst III

Spring Raise Service Ltd

<p><b>Security Compliance Manager Core Responsibilities:-</b></p><ul><li>Develop, implement, and maintain security compliance programs and policies</li></ul><ul><li>Monitor adherence to regulations such as HIPAA, PCI DSS, PII GDPR, SOX, and ISO 27001</li></ul><ul><li>Conduct regular risk assessments and internal audits</li></ul><ul><li>Collaborate with IT and security teams to address compliance gaps</li></ul><ul><li>Manage relationships with external auditors and regulatory bodies</li></ul><ul><li>Prepare compliance reports and present findings to senior leadership</li></ul><ul><li>Educate employees on compliance requirements and best practices</li></ul><ul><li>Track regulatory updates and adapt compliance programs accordingly</li></ul><p><b>Required Skills and Qualifications</b></p><ul><li>Strong knowledge of security frameworks such as NIST, ISO 27001, and CIS</li></ul><ul><li>Proficiency in governance, risk, and compliance (GRC) tools</li></ul><ul><li>Experience managing audits and compliance assessments</li></ul><ul><li>Ability to conduct risk assessments and remediation planning</li></ul><ul><li>Familiarity with cloud security and data privacy regulations</li></ul><p>Strong communication and presentation skills</p><ul><li>Attention to detail and ability to interpret complex regulations</li></ul><ul><li>Problem-solving and critical thinking abilities</li></ul><ul><li>Leadership and team coordination skills</li></ul><ul><li>Ability to influence stakeholders across technical and business units</li></ul><p><b>Education</b></p><ul><li>Bachelor&rsquo;s degree in cybersecurity, information systems, or business required</li></ul><ul><li>Master&rsquo;s degree in information security or risk management preferred</li></ul><p>Certifications</p><ul><li>CISSP, CISM, or CISA required</li></ul><ul><li>CRISC or ISO 27001 Lead Implementer/Auditor preferred</li></ul><p><b>Preferred Qualifications</b></p><ul><li>5&ndash;7 years of experience in security compliance or IT audit roles</li></ul><ul><li>Proven track record managing regulatory audits and certifications</li></ul><ul><li>Experience with data privacy compliance programs (GDPR, PII, CCPA, HIPAA)</li></ul><ul><li>Knowledge of emerging compliance requirements in cloud and SaaS environments</li></ul><ul><li>Background in leading cross-functional compliance initiatives</li></ul><p>Job Types: Full-time, Permanent</p><p>Pay: ₹40,000.00 - ₹65,000.00 per month</p><p>Benefits:</p><ul><li>Provident Fund</li></ul><p>Work Location: In person</p><p>Expected Start Date: 24/12/2025</p>

Security Compliance Manager

Physicians Revenue Group

<p><b>Key Responsibilities </b></p><ul><li>Maintain and update all ISMS documents, policies, procedures, and SOPs.</li><li>Ensure documentation meets ISO 27001 and HIPAA requirements.</li><li>Track and maintain evidence logs, audit files, and version control.</li><li>Plan and perform internal audits for ISO 27001 and HIPAA.</li><li>Assist SOC during internal and external compliance assessments.</li><li>Support external certification audits with auditors and stakeholders.</li><li>Maintain the Risk Register and coordinate with risk owners.</li><li>Work with SOC Manager to ensure SOC controls align with ISO/HIPAA.</li><li>Participate in post-incident reviews from a compliance perspective.</li><li>Support cybersecurity awareness and HIPAA training programs.</li><li>Maintain records of employee training for compliance purposes.</li><li>Assist in vendor due diligence, risk assessments, and security questionnaires.</li><li>Maintain vendor compliance documentation (e.g., HIPAA BAA, security clauses).</li><li>Prepare monthly compliance dashboards for management.</li><li>Escalate non-compliance issues or deviations to leadership.</li></ul><p>Job Type: Full-time</p><p>Application Question(s):</p><ul><li>&bull;	ISO 27001 Lead Auditor or Implementer (Mandatory)</li></ul><p>Education:</p><ul><li>Bachelor's (Preferred)</li></ul><p>Experience:</p><ul><li>3years: 1 year (Preferred)</li></ul><p>Work Location: In person</p>

GRC Coordinator

Managed Staffing, Inc.

<div>
 <p>
  GENERAL FUNCTION
 </p>
 <p>
  The IS Application Security Analyst will support the execution, planning, and administration of the Vulnerability Management function within Information Security (IS). The Vulnerability Management Analyst executes core processes in the vulnerability management program focused on vulnerability assessments, penetration testing and social engineering. Additionally, they will support the remediation of vulnerabilities resident within systems to minimize the organizations&rsquo; potential attack surface for exploitation.
 </p>
 <p>
  <br/>
 </p>
 <p>
  The Analyst will provide oversight, drive, facilitate and coordinate the management of vulnerabilities across the enterprise. The Analyst must understand underlying application code approaches in order to effectively review and respond to application security scans. While technical involvement is required, this role is not intended to perform direct remediation. The Analyst will support automated scans and may provide post-development testing assistance to validate that vulnerability remediation efforts are appropriately tested.
 </p>
 <p>
  <br/>
 </p>
 <p>
  BASIC QUALIFICATIONS &bull; Bachelor&rsquo;s degree computer science, IT or equivalent &bull; 3+ years of experience in IT or IS or Compliance &bull; Experience with major standards such as: SOC 1-2, ISO 27001/2, PCI DSS, HITRUST, SANS, NIST &bull; Demonstrated experience in implementing compliance frameworks for financial services organization or organizations with similar information security needs and requirements &bull; Familiarity and understanding of broad range of IT hardware and software products &bull; Strong project management skills &bull; Excellent presentation, verbal communication, and written skills &bull; Excellent analytical and problem-solving skills &bull; Experience managing typical enterprise security and intrusion detection systems &bull; Ability to work in a collaborative environment across business and technology teams &bull; Ability to interpret application structures and code approaches at a high level in order to review and respond to scan results
 </p>
</div>


Information Security Analyst

Independent Living Systems, llc

<div><p>We are seeking a Senior Security Analyst to join our team at Independent Living Systems (ILS). ILS, along with its affiliated health plans known as Florida Community Care and Florida Complete Care, is committed to promoting a higher quality of life and maximizing independence for all vulnerable populations.</p><p><b>
About the Role:</b></p><p>
The Senior Security Analyst plays a critical role in safeguarding the organization's information systems and digital assets by proactively identifying, analyzing, and mitigating security threats. This position is responsible for leading advanced security investigations, managing incident response activities, and ensuring compliance with industry standards and regulatory requirements. The role requires collaboration with cross-functional teams to design and implement robust security controls and to continuously improve the organization's security posture. The Senior Security Analyst will also mentor junior team members and contribute to the development of security policies and procedures. Ultimately, this role ensures the confidentiality, integrity, and availability of sensitive data while supporting business objectives through effective risk management.</p><p><b>
Minimum Qualifications:</b></p><ul><li>
Bachelor&rsquo;s degree in Computer Science, Information Security, or a related field.</li><li>
5+ years of experience in information security or cybersecurity roles.</li><li>
Strong knowledge of security frameworks such as NIST, ISO 27001, or CIS Controls.</li><li>
Experience with security monitoring tools such as SIEM, IDS/IPS, and endpoint protection platforms.</li><li>
Proven ability to conduct incident response and forensic investigations.</li><li>
Relevant experience may substitute for the educational requirement on a year-for-year basis.</li></ul><p><b>
Preferred Qualifications:</b></p><ul><li>
Master's degree in computer science, Information Security, or a related field.</li><li>
Professional certifications such as CISSP, CISM, or GIAC.</li><li>
Experience with cloud security platforms (AWS, Azure, or Google Cloud).</li><li>
Familiarity with scripting or programming languages such as Python, PowerShell, or Bash.</li><li>
Knowledge of regulatory requirements such as GDPR, HIPAA, or PCI-DSS.</li><li>
Experience in threat hunting and advanced persistent threat (APT) detection.</li></ul><p><b>
Responsibilities:</b></p><ul><li>
Monitor security alerts and analyze potential threats using advanced security tools and techniques.</li><li>
Lead incident response efforts, including investigation, containment, eradication, and recovery from security breaches.</li><li>
Conduct vulnerability assessments and penetration testing to identify and remediate security weaknesses.</li><li>
Develop and maintain security documentation, including policies, procedures, and incident reports.</li><li>
Collaborate with IT, compliance, and business units to implement security best practices and ensure regulatory compliance.</li><li>
Provide mentorship and guidance to junior security analysts and other team members.</li><li>
Stay current with emerging security threats, technologies, and industry trends to proactively enhance security measures.</li></ul></div>

Senior Security Analyst

Tata Consultancy Services (TCS)

<div></div><div><div><div><div><div><ul><li><ul><li>Proven experience in maintaining endpoint security solutions across enterprise environments.</li>
</ul><ul><li>Provide compliance reports (monthly and based on need)</li>
</ul><ul><li>Performing analysis of end-point security needs that contribute to the design, integration, and installation of hardware and software.</li>
</ul>
<div></div><ul><li>Analysis, troubleshooting and development of solutions to end-point security problems.</li>
</ul></li></ul></div></div></div></div><div></div><div><div><div><b>Location</b></div>
<div>Hyderabad</div>
</div><div><div><b>Job Function</b></div>
<div>TECHNOLOGY</div>
</div><div><div><b>Role</b></div>
<div>Analyst</div>
</div><div><div><b>Job Id</b></div>
<div>387473</div>
</div><div><div><b>Desired Skills</b></div>
<div>SIEM Endpoint Security | Symantec Endpoing Security</div>
</div></div><p>Desired Candidate Profile
</p><div><div><b>Qualifications</b> : BACHELOR OF ENGINEERING, BACHELOR OF FINE ARTS, BACHELOR OF HOSPITAL MANAGEMENT, BACHELOR OF LAW</div></div></div><div></div>

Security Analyst

ACCC

<p></p><b>Overview </b><p>Do you want to work at an agency where each day reveals new opportunities to work on some of the biggest issues facing consumers and businesses and have opportunities to pursue new and exciting pathways? </p><p>Do you want to work at a place where smart and dedicated people from all walks of life collaborate to work on meaningful matters? </p><p>Do you want to play a key role in administrative discipline and effectiveness of our Information Security Management System (ISMS) especially compliance with the Australian Government Information Security Manual (ISM)? </p><p><b>Then this is the place for you! </b> At the ACCC, we're proud of the impact we can make together. We understand the responsibilities and challenges that come with a fast moving and ever-changing environment. Our high performing culture is built on a foundation of care, support and inclusion. It's why we're driven by connection and collaboration, sharing our skills, knowledge and support with each other freely and frequently. It's why we prioritise the wellbeing of our people and empower them to work autonomously, flexibly and courageously. At the ACCC, we believe the best version of you is the one that's true to who you are - and that's the you we want working alongside us. </p><p>We value flexibility, and all roles can be performed from any capital city in a state or territory or Townsville and are available on a full-time, part-time or job-share basis. </p><p><b>Applicants from diverse backgrounds including First Nations peoples, people with disability and those from different cultural backgrounds are encouraged to apply. </b> </p><b>What you will do as the Senior Cyber Security Analyst </b><p><b>The Senior Cyber Security Analyst </b> will play a key role in administrative discipline and effectiveness of our Information Security Management System (ISMS) especially compliance with the Australian Government Information Security Manual (ISM). You will be responsible for security monitoring and reporting, user administration and support of security tools based on ISM standards, playing a pivotal role in the Consumer Data Right (CDR) initiative by promoting a secure, reliable, and trusted environment. </p><p><b>As An APS6 Senior Cyber Security Analyst, You Will </b> </p><ul><li>Collaboratively work with vendors, service providers, other Commonwealth cyber security teams, and external specialists to implement and operationalise security controls and improve monitoring systems. </li><li>Undertake daily operations activities including user administration of role-based access control (RBAC), extensive use of Azure security tools and dashboards, regular audits configurations to ensure compliance and appropriate assignment of privileges. </li><li>Review security incident and event logs and monitor threat intelligence feeds and contribute to ongoing threat intelligence. </li><li>Monitor, analyse, and report compliance against ISMS controls, identifying areas for improvement in data collection, assurance processes, and security procedures. </li><li>Provide timely intelligence reporting on potential security risks and ISM compliance issues. </li><li>Contribute to the development of tactical controls and contribute to strategic direction of cyber security operations. </li><li>Prepare regular reports and presentations on cyber security for management and executives. </li> </ul><b>About You </b><p>When assessing applications, we will have regard to the APS Integrated Leadership Profile (ILS) for the APS classification. Follow the link for more information on the ILS. The APS6 role in particular requires: </p><ul><li>Demonstrated ability to work in a neurodiverse security team, fostering a psychologically safety and productive work environment. Commitment to confidentiality and secure handling of sensitive information. </li><li>Demonstrated experience in dealing with enquiries and managing stakeholder relations in a composed and structured manner. </li><li>Demonstrated ability to work autonomously within a team environment and independently with minimal supervision. </li><li>Strong interpersonal skills and ability to present information clearly and concisely. </li><li>Broad knowledge of contemporary cyber security eco-system and an ability to identify solution that improve assurance processes. </li><li>Solid understanding of cyber security monitoring and reporting operations particularly against standards like the Australian Government Information Security Manual (ISM). </li><li>Applied knowledge and understanding of Australian Government Information Security Manual (ISM). </li><li>Applied knowledge and experience with key cyber security technologies and solutions including Azure tools (e.g., Sentinel and Defender), SPLUNK and Airlock. </li><li>Strong background in Azure Cloud Security environments and proficiency in Microsoft. </li><li>Experience using Azure, Microsoft 365 and DevOps tools. </li> </ul><p>To find out more about us and the role, please read the Candidate Kit. </p><b>Security clearance </b><p>This role requires a minimum of Negative Vetting 1 security clearance to be obtained and maintained, whilst in the role. </p><b>How To Apply </b><p>You will be asked to respond to the statement of claims of no more than 800 words and submit your resume with key outcomes or what you are most proud of in each role you have held (2 pages maximum). </p><p><b>Salary: </b> APS6: $99,562 to $111,590 (plus 15.4% superannuation) </p><p><b>Contact Officer: </b> Jasmine Mosenich - </p><p><b>Applications Close: </b> 11:00pm (AEDT) 02 November 2025 </p> <p></p>

Senior Cyber Security Analyst - APS6 (EA2025/218)

Search 10000+ Security compliance analyst jobs near you this January. New roles added regularly across leading industries. Apply today.