security compliance analyst

Stellar Hunters

<div>We are seeking a detail-oriented and strategically minded Information Security Compliance Analyst to join our security and risk team. The ideal candidate will support the development, implementation, and maintenance of information security compliance programs, frameworks, and controls; ensure alignment with applicable regulatory and contractual requirements; and collaborate with IT, engineering, legal, and business stakeholders to reduce risk and demonstrate compliance. This role requires hands-on compliance experience, strong knowledge of security frameworks and standards, excellent documentation skills, and the ability to communicate technical requirements to non-technical audiences.<h3 class="jobSectionHeader">
Key Responsibilities for Information Security Compliance Analyst</h3><ul><li>
Implement, maintain, and monitor information security compliance programs and control frameworks (e.g., ISO 27001, NIST CSF, SOC 2, PCI-DSS, HIPAA) to ensure ongoing alignment with regulatory, contractual, and business requirements.</li><li>
Manage and execute internal compliance assessments, risk assessments, and control testing; document findings, track remediation activities, and verify corrective actions.</li><li>
Support third-party security assessments and vendor risk management processes, including intake questionnaires, evidence collection, review of results, and coordination of mitigation plans with vendors and internal stakeholders.</li><li>
Coordinate and support external audits and certification efforts (e.g., SOC 2 audits, ISO certifications, regulatory reviews), serving as a primary point of contact for auditors and external assessors.</li><li>
Develop, maintain, and update security policies, standards, procedures, and control matrices; ensure documentation is current, accessible, and mapped to applicable frameworks and requirements.</li><li>
Collect, analyze, and report compliance metrics and status to security leadership and cross-functional partners; prepare evidence packages and executive-ready reports demonstrating control effectiveness and remediation progress.</li><li>
Collaborate with Information Security, IT operations, engineering, legal, and business teams to interpret compliance requirements, integrate controls into processes and systems, and advise on remediation or compensating controls.</li><li>
Stay informed of changes in privacy, security, and regulatory landscapes; evaluate impacts to the organization and recommend required updates to policies, controls, or compliance programs.</li><li>
Provide training and awareness sessions for employees on security compliance topics, control responsibilities, and evidence collection best practices.</li></ul><h4 class="jobSectionHeader">
Required Qualifications - Skills &amp; Experience</h4><ul><li>
Bachelor&rsquo;s degree in Information Security, Cybersecurity, Information Technology, Computer Science, Risk Management, or related field, or equivalent experience.</li><li>
3+ years of experience in information security compliance, audit, risk management, or related roles within technology-driven or regulated organizations.</li><li>
Practical knowledge of common security frameworks and standards (e.g., SOC 2, ISO 27001, NIST CSF, PCI-DSS) and experience mapping controls to requirements.</li><li>
Experience performing control testing, risk assessments, vendor security reviews, and preparing evidence for audits or certifications.</li><li>
Strong written and verbal communication skills; ability to produce clear policy and procedure documentation and present compliance status to technical and non-technical stakeholders.</li><li>
Familiarity with security and compliance tooling (e.g., GRC platforms, SIEM, vulnerability management, ticketing/ITSM systems) and proficient with Excel or similar data analysis tools.</li><li>
Excellent organizational skills and attention to detail, with the ability to manage multiple priorities, deadlines, and cross-functional projects.</li></ul><h4 class="jobSectionHeader">
Preferred Qualifications - Certifications &amp; Tools</h4><ul><li>
Relevant certifications such as CISA, CISSP, ISO 27001 Lead Implementer/Auditor, CRISC, or similar are preferred.</li><li>
Experience supporting SOC 2 or ISO 27001 audits, or leading vendor risk and third-party assessment programs.</li><li>
Familiarity with cloud security controls and compliance in AWS, Azure, or GCP, and experience working with DevOps/engineering teams to embed controls into CI/CD pipelines.</li><li>
Prior experience with GRC platforms (e.g., RSA Archer, ServiceNow GRC, OneTrust, Drata) or automation of compliance evidence collection is a plus.</li></ul><h5 class="jobSectionHeader">
Work Environment &amp; Compensation</h5><ul><li>
Full-time position with an onsite work model.</li><li>
Competitive salary commensurate with experience and a comprehensive benefits package, including health insurance, retirement plan options, and paid time off.</li><li>
Opportunities for professional development, continuing education support, and assistance with certification costs.</li><li>
Collaborative and inclusive team culture committed to diversity, equity, and professional growth.</li></ul></div>

Information Security Compliance Analyst

Avion Solutions, Inc.

<div>Avion Solutions Inc., an employee-owned company, is seeking candidates for a Cybersecurity Analyst to support PEO Aviation Headquarters. This position is located in Huntsville, AL.
Job Responsibilities/Duties:<ul><li>
Oversee and execute comprehensive audits and compliance checks to ensure all network and system infrastructure adheres to United States Department of Defense (DoD) and United States Army regulations.</li><li>
Conduct in-depth risk analyses, security assessments, and compliance validations for enterprise security strategies.</li><li>
Maintain accurate compliance documentation and manage records within the Enterprise Mission Assurance Support Service (eMASS) platform.</li><li>
Support the development, enhancement, and implementation of organizational cybersecurity policies, standards, and best practices.</li><li>
Determine data sensitivity levels and perform vulnerability scans in accordance with established classification guidelines and data flows.</li><li>
Continuously monitor security tools (e.g., SIEM, EDR) to detect and investigate suspicious activity.</li><li>
Analyze network traffic and system logs to identify anomalies and potential security breaches.</li><li>
Lead initial incident response efforts, from triage and investigation through containment and remediation.</li><li>
Participate in post-incident reviews to identify lessons learned and strengthen defensive strategies.</li><li>
Leverage cyber threat intelligence feeds to proactively identify and mitigate emerging threats.</li><li>
Other duties as assigned.
</li></ul>Required Experience:<ul><li>
Bachelor&rsquo;s degree with 5+ years of cybersecurity experience supporting DoD programs.</li><li>
Full compliance with DoDI 8140 certification requirements.</li><li>
Must be a U.S. citizen and have an active DoD Secret Security Clearance.</li><li>
Must be able to travel up to 25% of the time. US travel only.</li></ul>
Preferred Qualifications:<ul><li>
Advanced industry certifications (e.g., CISSP, CEH).</li><li>
Experience administering Windows Server environments.</li><li>
Working knowledge of Cisco router and switch configuration.</li><li>
Background in software assurance and secure development lifecycle (SDLC) practices.</li><li>
Hands-on experience with cybersecurity frameworks and tools, including Zero Trust architectures, SIEM platforms, vulnerability scanners, and network analysis tools.</li><li>
Strong analytical and problem-solving skills with exceptional attention to detail.</li><li>
Ability to interpret and apply cybersecurity directives from DoD and Army sources.</li><li>
Excellent written and verbal communication skills, including the ability to explain complex technical concepts to diverse audiences.</li><li>
Solid understanding of networking fundamentals, including architecture, protocols, and security principles.</li><li>
Proactive, inquisitive mindset with a commitment to continuous professional growth.Strong written and oral communication skills.</li></ul> 
Equal Opportunity: Avion Solutions, Inc. reaffirms its belief in equal employment opportunity for all employees and applicants. Avion Solutions, Inc. is an Equal Employment Opportunity Employer and a VEVRAA-governed Federal Contractor that affords equal employment opportunity to protected veterans and people with disabilities. Avion Solutions, Inc. provides all employees and job applicants equal employment opportunities in hiring and promotion without regard to age, sex, sexual orientation, marital status, race, religion, color, veteran status, genetic information, physical or mental disability, national origin, or any other reason prohibited by law.</div>

Cybersecurity Analyst

CloudPSO

<div><div>This is a remote position.
Engagement: Contract / Full‑Time (Flexible) 
Location: Remote (US Public Sector experience required)
About the Role 
We are seeking an experienced FedRAMP Consultant to lead and support our organization through the FedRAMP Readiness and Authorization process. This role requires deep hands‑on experience working with FedRAMP Moderate/High baselines, supporting 3PAO assessments, and guiding teams through documentation, remediation, and audit preparation. 
You will serve as the primary expert advising our technical, security, compliance, and leadership teams&mdash;ensuring all requirements are implemented effectively and communicated clearly to external auditors (3PAOs) and the FedRAMP PMO. 
Key Responsibilities 
FedRAMP Readiness &amp; Certification 
<ul><li>Lead the end‑to‑end FedRAMP readiness, assessment, and authorization activities. 
</li>
<li>Develop and refine all required FedRAMP documentation, including but not limited to: 
</li>
<li><ul><li>System Security Plan (SSP) 
</li>
<li>POA&amp;M 
</li>
<li>Security Assessment Plan/Report (SAP/SAR) coordination 
</li>
<li>Policies &amp; procedures aligned with NIST 800‑53 Rev5 controls 
</li>
</ul></li><li>Conduct readiness assessments and gap analyses to evaluate compliance posture.</li> 
</ul>3PAO Audit Coordination 
<ul><li>Serve as the primary liaison between the organization and the external 3PAO auditor. 
</li>
<li>Prepare technical and functional teams for 3PAO interviews, evidence requests, and control validation. 
</li>
<li>Manage evidence collection, review, and submission to auditors. 
</li>
<li>Support remediation of audit findings and ensure timely POA&amp;M updates.</li> 
</ul>Security &amp; Compliance Program Support 
<ul><li>Work closely with engineering, DevOps, IT, and security teams to implement and validate technical controls. 
</li>
<li>Review system architecture and guide teams in meeting FedRAMP‑specific requirements (logging, vulnerability management, boundary definition, encryption, etc.). 
</li>
<li>Establish continuous monitoring processes and assist in ongoing compliance operations.</li> 
</ul>Documentation &amp; Process Improvement 
<ul><li>Ensure all FedRAMP documentation is continuously updated and audit‑ready. 
</li>
<li>Create templates, playbooks, and internal workflows to streamline compliance activities. 
</li>
<li>Provide FedRAMP training/awareness to internal stakeholders as needed.</li> 
</ul> 
<h3 class="jobSectionHeader">Requirements</h3>
<ul><li>3&ndash;7+ years of hands‑on FedRAMP experience, including working directly with FedRAMP Moderate or High systems. 
</li>
<li>Demonstrated experience participating in or leading 3PAO audits. 
</li>
<li>Strong understanding of: 
</li>
<li><ul><li>NIST 800‑53 Rev4/Rev5 
</li>
<li>FedRAMP RAR, SAP/SAR, POA&amp;M processes 
</li>
<li>Cloud environments (AWS, Azure, GCP) and their FedRAMP offerings 
</li>
</ul></li><li>Proven ability to write and maintain high‑quality security documentation (SSP, policies, procedures). 
</li>
<li>Experience collaborating with engineering/security teams on technical control implementation. 
</li>
<li>Excellent communication skills with the ability to translate compliance requirements into actionable tasks.</li> 
</ul>Preferred Qualifications 
<ul><li>FedRAMP program experience from a CSP, 3PAO, or consulting firm. 
</li>
<li>Experience with vulnerability management tools, logging/monitoring solutions, and secure cloud architectures. 
</li>
<li>Relevant certifications (nice to have): 
</li>
<li><ul><li>CAP, CISSP, CISA, CCSP, Security+, AWS/Azure/GCP security certifications</li> 
</ul></li></ul>What Success Looks Like 
<ul><li>A cleanly organized and ready‑for‑submission FedRAMP package. 
</li>
<li>Streamlined coordination with the 3PAO and minimized audit findings. 
</li>
<li>Clear, repeatable processes to maintain continuous monitoring and ongoing compliance. 
</li>
<li>Strong partnership with internal teams, building confidence and compliance maturity.</li></ul></div></div>

FedRAMP Consultant (Readiness & Certification Lead) - Remote

Bigshare Services Pvt LTd

Job Overview:Position : Cyber Security Engineer (Compliance Focus)Reports To : IT Dept HeadExperience : Minimum 5+ years of Cyber Security Engineer (Compliance Focus)Job Location : Andheri (East)Company Website: www.bigshareonline.comPosition Overview:We are seeking a dedicated Cyber Security Engineer with a strong emphasis on compliance to join our team. This role is pivotal in ensuring our organization's cyber security practices align with regulatory standards, industry best practices, and internal policies. The ideal candidate will be responsible for developing and maintaining security policies, managing relationships with auditors and vendors, and implementing technical controls to safeguard our systems. This position requires a blend of technical expertise and compliance knowledge to mitigate risks and maintain audit readiness.Key Responsibilities: Policy Development and Management: Create, review, and update cyber security policy documents, including incident response plans, data protection policies, and compliance frameworks. Ensure all policies comply with relevant regulations industry-specific standards. Audit and Compliance Oversight: Oversee and manage cyber security audits, including internal assessments and external engagements with auditors. Evaluate security controls, provide recommendations to management, and ensure remediation of identified vulnerabilities. Conduct thorough security assessments to identify risks in systems and infrastructure. Vendor and Auditor Management: Manage relationships with cyber security vendors and auditors, including contract negotiations, performance evaluations, and coordination of audits. Ensure vendor compliance with security requirements and oversee third-party risk assessments. Technical Security Implementation: Implement and manage security tools such as firewalls, antivirus software, and intrusion detection systems. Develop and maintain firewalls to safeguard systems from unauthorized access. Incident Response and Monitoring: Lead computer incident investigations, determine root causes, and implement corrective actions. Ensure ongoing security scanning, monitoring, and compliance reporting. Risk Management and Training: Collaborate with IT, audit, and senior management to align security programs. Provide training on compliance and security best practices to enhance organizational awareness. System Administration: Work on virtual machines (VMs) and Active Directory (AD) environments to enforce security policies. Maintain antivirus solutions and ensure basic firewall configurations are in place to protect network integrity.Required Qualifications and Skills: Bachelor's degree in Computer Science, Information Security, or a related field; certifications such as CISSP, CISA, or CompTIA Security+ are highly preferred. At least 3-5 years of experience in cyber security roles, with a proven track record in compliance-focused environments. Hands-on experience with VM management, Active Directory (AD), antivirus deployment, and basic firewall configurations. Familiarity with tools like endpoint detection and response (EDR) systems is essential. Strong understanding of regulatory compliance and audit processes. Proficiency in policy creation, risk assessment, and vendor management. Excellent analytical skills for diagnosing threats, running diagnostic tests, and analyzing data to spot vulnerabilities. Ability to lead complex projects, including firewall policy management and security infrastructure maintenance. Strong communication skills for collaborating with auditors, vendors, and internal teams.Preferred Experience: Prior work in regulatory, audit, or compliance roles within cyber security . Experience managing security programs and ensuring alignment with senior management. Familiarity with incident response, root cause analysis, and remediation strategies. This role offers an opportunity to be the key point person for security, ensuring data remains protected against threats while maintaining compliance.Job Types: Full-time, PermanentPay: ₹75,000.00 - ₹85,000.00 per monthBenefits:<ul><li>Cell phone reimbursement</li><li>Paid sick time</li><li>Provident Fund</li></ul>Work Location: In person

Cyber Security Engineer

Strategic Analysis, Inc

<div>Strategic Analysis, Inc. is seeking a candidate to provide Information Systems Security Officer (ISSO) and technical advisory support. The successful candidate will have expertise in Department of Defense (DOD) compliance standards and a strong familiarity with NIST (National Institute of Standards and Technology) RMF (Risk Management Framework) and the Authority to Operate (ATO) process. In this role, you will be responsible for ensuring the security and compliance of information systems within a DoD environment. 
 
Responsibilities: 
 
<ul><li>DoD Compliance: Coordinate and execute efforts to ensure that information systems, processes, and organization policy comply with Department of Defense (DOD) cybersecurity and regulatory requirements and standards. This includes DoD 5400 Series, NIST SP 800-53, NIST SP 800-37, NIST SP 800-60, and FIPS 140-2, with some level of awareness regarding Trade Agreement Act (TAA) and Clinger Cohen Act (CCA) compliance.</li><li>ATO: Assist in the management of the Authorization to Operate (ATO). Collaborate with relevant stakeholders to ensure timely and successful processing of Risk Management Framework (RMF) workflows. This includes preparing and submitting artifacts, conducting security assessments, and liaising with the Authorizing Official (AO) SCA (Security Control Assessor) Team.</li><li>Security Assessments: Perform risk and vulnerability assessments on information systems and software to identify weaknesses. Utilize ACAS (Assured Compliance Assessment Solution) and/or Tenable, Inc. products to provide mitigation and/or remediation guidance to applicable stakeholders.</li><li>Security Documentation: Coordinate and collaborate with DCWF (Defense Cyber Workforce) personnel to develop, update, and continuously monitor security documentation, including but not limited to System Security Plans (SSPs), Security Assessment Reports (SARs), Plan of Action and Milestones (POA&amp;Ms), security control implementation plans, and assessment procedure test results.</li><li>Security Awareness: Promote a culture of cybersecurity awareness by educating staff and stakeholders about emerging cybersecurity policies and best practices. Adhere to DoD 8140 guidelines to ensure cybersecurity training and awareness programs remain active and all DCWF personnel remain on their compliance roadmap.</li><li>Continuous Monitoring: Collaborate in maintaining the continuous monitoring strategy; assist in the observation and analysis of detected threats and/or compliance violations.</li><li>Collaboration: Collaborate with cross-functional teams, including IT, engineering, software development, and AI/data collection teams to ensure security requirements are integrated into system designs and processes.</li></ul>
 
Qualifications: 

 
<ul><li>8 Years and Bachelor's or relevant years of experience in lieu of degree.</li><li>Minimum of 3 years of experience as an ISSO or in a similar role.</li><li>In-depth knowledge of DOD compliance standards, including NIST, RMF, and DODI 8500 Series.</li><li>Proven experience in executing ATO processes and achieving ATO approvals.</li><li>Familiarity with cybersecurity tools such as SCAP, STIGs, and ACAS.</li><li>Strong analytical and problem-solving skills.</li><li>Excellent written and verbal communication skills.</li><li>Strong analytical and problem-solving skills.</li></ul>
 
Certifications: 
<ul><li>Intermediate or Advanced 8140 Certificates, one or more of the following: Intermediate: Sec+, SSCP, GSEC, CGRC/CAP, CCSP, CCISO, CASP+ Advanced: CISM, CISSO, CISSP, CISSP-ISSMP, GCIA, GCIH, GCSA, GICSP, GSLC.</li></ul></div>

Senior Information System Security Officer (TS/SCI #26-031)

ClearTax

<div></div><div><div><div><div><div><div>Department</div><div>
Engineering</div></div><div><div>
Job posted on</div><div>
Feb 23, 2026</div></div><div><div>
Employment type</div><div>
Defmacro FTE</div></div></div></div></div><div></div><div><div><div><div><div>
Key Responsibilities</div><div>
1. Compliance Operations &amp; Audit Readiness</div><ul><li>
Demonstrate hands-on working knowledge of at least one major security framework (ISO 27001, SOC 2, GDPR, DPDP, etc.) and the ability to learn others quickly.</li><li>
Interpret audit findings/NCs, identify compliance gaps, and drive closure independently with cross-functional teams (Infra, Engineering, Product, Legal, HR).</li><li>
Maintain continuous readiness for internal/external audits through structured evidence management, document updates, and control monitoring.</li></ul><div>
2. Risk Management &amp; Governance</div><ul><li>
Perform internal gap assessments, maturity assessments, and risk analyses mapping to ISO 27001/31000, NIST CSF, CIS, SOC2, DPDP.</li><li>
Assist in building, implementing, and maintaining governance frameworks, security policies, SOPs, standards, and control libraries.</li><li>
Create impact-oriented risk dashboards, KRIs/KPIs, and compliance scorecards for leadership.</li></ul><div>
3. Security Automation &amp; Control Monitoring</div><ul><li>
Work with the Cyber Security Leader to automate recurring governance operations, including access reviews, evidence workflows, risk scoring, vendor assessments, and configuration audits.</li><li>
Review and monitor security configurations for tools like MDM, DLP, EDR, IAM, CIEM, SSO, etc., and ensure deviations are tracked and remediated.</li><li>
Build AI governance layer and perform security reviews</li></ul><div>
4. Third-Party/Vendor Risk Management</div><ul><li>
Conduct and maintain end-to-end vendor security reviews, DPAs, privacy assessments, and risk profiles.</li><li>
Work with Procurement, Legal, and Engineering to onboard vendors and ensure contractual compliance with global standards.</li></ul><div>
5. Privacy, Global Regulations &amp; Due-Diligence Support</div><ul><li>
Research new privacy/security laws (DPDP, GDPR, PDPL UAE/KSA, LHDN Malaysia, EU PDP, etc.) and translate them into actionable business requirements.</li><li>
Respond to enterprise client security due-diligence questionnaires, RFPs, contractual clauses, and customer audits.</li></ul><div>
6. Awareness, Training &amp; Culture</div><ul><li>
Plan and deliver employee security awareness initiatives&mdash;trainings, phishing drills, campaigns, newsletters, and behavioral insights.</li><li>
Maintain documentation for incidents, BC/DR exercises, and compliance operations to support org-wide security culture.</li></ul><div>
Required Skills &amp; Experience</div><ul><li>
Bachelor&rsquo;s/Master&rsquo;s degree in Computer Science, Information Security, Engineering, or related field.</li><li>
3&ndash;6 years of GRC, Security Governance, Compliance, Audit, or IT Risk Management experience in a SaaS or cloud-first environment.</li><li>
Understanding of frameworks &amp; standards: ISO 27001/31000, SOC2, NIST CSF, CIS, COBIT, COSO.</li><li>
Good familiarity with DPDP, GDPR, CERT-In, and sector-specific regulations.</li><li>
High sense of ownership and accountability &mdash; able to independently take a task from requirement to completion without needing follow-ups.</li><li>
Strong ability to translate compliance frameworks into actionable tasks and measurable controls.</li><li>
Analytical mindset with strong documentation and problem-solving abilities.</li><li>
Excellent communication skills for dealing with auditors, enterprise customers, and internal leadership.</li></ul></div></div></div></div></div>

InfoSec Engineer II

Sagar Fabrics

We are seeking a skilled Cybersecurity GRC Specialist to lead and strengthen our Governance, Risk, and Compliance initiatives. This role focuses on managing cybersecurity risks, ensuring regulatory compliance, supporting audits, and implementing security frameworks to protect organizational information assets.Key Responsibilities<ul><li>Lead and manage Governance, Risk, and Compliance (GRC) activities across the organization</li><li>Perform cybersecurity risk assessments and maintain enterprise risk registers</li><li>Develop, review, and update information security policies, standards, and procedures</li><li>Ensure compliance with frameworks and regulations such as ISO 27001, SOC 2, GDPR, PCI-DSS, and NIST</li><li>Coordinate and support internal and external security audits</li><li>Track, remediate, and report audit findings and risk treatment plans</li><li>Conduct third-party/vendor risk assessments and due diligence</li><li>Monitor compliance with regulatory, legal, and contractual security requirements</li><li>Collaborate with IT, Legal, and Business teams to implement security controls</li><li>Prepare risk reports, compliance dashboards, and management presentations</li><li>Stay updated with evolving cybersecurity threats, regulations, and best practices</li></ul>Required Skills &amp; Qualifications<ul><li>Bachelor&rsquo;s degree in Cybersecurity, Information Technology, Computer Science, or related field</li><li>3+ years of experience in cybersecurity GRC, risk management, or compliance</li><li>Strong knowledge of cybersecurity frameworks and standards (ISO 27001, NIST, SOC 2, PCI-DSS, GDPR)</li><li>Experience in conducting risk assessments and audits</li><li>Strong documentation, policy writing, and reporting skills</li><li>Understanding of IT controls, data protection, and security governance</li><li>Excellent communication and stakeholder management skills</li></ul>Preferred / Good to Have<ul><li>Certifications such as ISO 27001 Lead Implementer/Auditor, CISA, CRISC, CISSP (preferred)</li><li>Hands-on experience with GRC tools (ServiceNow GRC, Archer, One Trust, etc.)</li><li>Experience in cloud security compliance (AWS, Azure, GCP)</li><li>Knowledge of data privacy laws and regulatory environments</li></ul>Job Types: Full-time, PermanentPay: ₹25,000.00 - ₹50,000.00 per monthBenefits:<ul><li>Provident Fund</li></ul>Work Location: In person

Cybersecurity GRC Analyst

Search 10000+ Security compliance analyst jobs near you this March. New roles added regularly across leading industries. Apply today.