Note: The job is a remote job and is open to candidates in USA. ShorePoint is a cybersecurity services firm focused on protecting data for high-profile, high-threat public and private sector customers. The Security Compliance Analyst supports federal cybersecurity compliance activities, including FISMA-driven assessment and authorization, risk management, audit readiness, security documentation, control implementation, continuous monitoring, and compliance reporting for ICAM systems.
Responsibilities
- Support the SIAM in executing the program’s information assurance and cybersecurity compliance strategy
- Coordinate with ISOs and ISSOs to maintain system security documentation, track control implementation and support Authorization to Operate (ATO) and continuous ATO (cATO) activities
- Support FISMA compliance activities, including annual self-assessments, security control assessments and preparation for Inspector General (IG) and Office of Management and Budget (OMB)-driven audits
- Develop, review and maintain security artifacts, including System Security Plans (SSPs), Security Assessment Reports (SARs), Plans of Action and Milestones (POA&Ms) and Risk Assessment Reports (RARs)
- Support Risk Management Framework (RMF) activities, including control selection, implementation tracking, assessment and continuous monitoring
- Track POA&M remediation activities to ensure findings from audits, assessments and vulnerability scans are documented, assigned and closed within required timelines
- Assist with the preparation of materials and evidence packages for internal reviews, external audits and compliance inspections (e.g., FISMA, OIG, GAO, or agency-specific audits)
- Support the security compliance posture of ICAM systems and track security policy, procedure and control updates to maintain alignment with evolving federal requirements
- Maintain continuous monitoring documentation and support monthly and quarterly compliance reporting to program leadership and government stakeholders
- Participate in security control assessments, walkthroughs and stakeholder interviews to validate control implementation
- Maintain organized documentation repositories and audit trails to support inspection readiness
- Communicate compliance status, risks and action items to the SIAM and program leadership
Skills
- * Bachelor's degree in Cybersecurity, Information Technology, Information Systems, or a related field, or equivalent professional experience
- * 2+ years of experience in federal information security compliance, IT security, or a related field
- * Experience with Governance, Risk, and Compliance (GRC) tools such as Xacta, CSAM, RSA Archer or similar
- * Demonstrated experience supporting FISMA compliance activities and/or federal security audits
- * Experience collaborating with ISOs and/or ISSOs on system security documentation and A&A activities
- * Strong written and verbal communication skills, with the ability to translate technical compliance findings into clear, actionable reporting for government stakeholders
- * Strong organizational skills and attention to detail, particularly around documentation control and audit readiness
- * Proven ability to analyze complex requirements and translate them into clear, actionable tasks and processes through critical thinking
- * Applicants must be a U.S. citizen and eligible to obtain and maintain a Public Trust security clearance, in compliance with federal contract requirements
- * Experience supporting an ICAM program or similar identity governance initiative
- * Familiarity with Federal Identity, Credential, and Access Management (FICAM) architecture, NIST SP 800-63 digital identity guidelines or OMB M-19-17 or successor ICAM policy
- * Relevant certifications such as CompTIA Security+, Certified Authorization Professional (CAP), Certified Information Systems Security Professional (CISSP) or Certified Information Systems Auditor (CISA)
- * Experience supporting continuous monitoring programs or cATO initiatives
- * Prior experience in a federal contracting environment supporting a civilian or defense agency
Benefits
- Meaningful and exciting career development opportunities
- Culture tailored to individual technical and professional growth
- Comprehensive benefits package with major healthcare provider carriers
- 144 hours of PTO
- 11 holidays
- 85% of insurance premiums covered
- 401(k)
- Continuing education
- Certification maintenance and reimbursement
- Remote work in Herndon, VA
Company Overview