Information Assurance and Compliance Analyst
Skills
CSFCompliance AuditingDatabasesISO StandardsInformation AssuranceRecruitingRisk Management
What the job involves
The main requirements, responsibilities and hiring steps.
Requirements
- 4+ years of experience developing implementing and managing cybersecurity policies
- Strong understanding of NIST Cybersecurity Framework and ability to translate framework principles into actionable security strategies
- Experience maintaining high-level compliance with IL5 FedRAMP HIGH SOC2 and ISO standards
- Experience developing data classification policies and IT data protection requirements
- Strong knowledge of AWS Cloud Platform
- Ability to prepare and support security documentation for compliance audits
- Excellent communication and training skills for educating employees on privacy protections and restrictions
- Ability to review policies and drive practical implementation
- Familiarity with the ATO process
- Relevant certifications such as CISSP CISM or CIPP/US are highly desirable
- Ability to pass an enhanced security background check including financial vulnerability assessment
Nice to have
- Cross-functional collaborator
- Policy-minded
- Detail-oriented
- Security-conscious
- Training-focused
Day to day
- Develop and implement comprehensive cybersecurity policies aligned to NIST CSF and government standards such as IL5 and FedRAMP HIGH
- Maintain compliance with evolving security requirements while ensuring technical and non-technical controls protect sensitive information
- Collaborate across teams to integrate cybersecurity policies into business operations and support ATO readiness
- Educate employees on privacy protections and security restrictions through clear training and communication