
Compliance & Security Analyst
Posted 1 day ago

Posted 1 day ago
This is a fully remote position, open to applicants in United States.
• Serve as the primary point of contact for the Overwatch Continuous Compliance initiative.
• Oversee a portfolio consisting of roughly 10 clients.
• Provide consultation and guidance to clients in achieving CMMC 2.0 (Level 2) audit readiness.
• Convert federal directives into concise technical roadmaps for client leadership and IT departments.
• Design and draft System Security Plans (SSPs).
• Create and manage Plans of Action and Milestones (POAMs), monitoring deficiencies and directing remediation efforts.
• Compose formal security policies that accurately represent clients’ operational realities.
• Plan and conduct annual Incident Response and Disaster Recovery tabletop exercises.
• Lead evidence collection and confirm logs and configurations meet C3PAO auditor sufficiency criteria.
• Stay informed about relevant federal, state, and local laws, regulations, and Logicalis policies.
• Uphold customer service expectations.
• No supervisory duties involved.
• Bachelor’s degree in a related discipline.
• Acceptable equivalent combinations will be considered.
• Experience in advising on compliance enclaves and segmenting Controlled Unclassified Information (CUI).
• Familiarity with verifying FIPS 140-2/3 encryption validation.
• Proficiency in interpreting network diagrams to identify boundary protection and data-flow gaps.
• Understanding of audit-log requirements for Multi-Factor Authentication (MFA), access control, and system monitoring.
• Expertise in CMMC 2.0 (Level 2) and NIST SP 800-171.
• Excellent technical writing skills for creating SSPs, SOPs, and policies.
• Knowledge of SOC 2, ISO 27001, HIPAA, or GDPR standards.
• Experience with Governance, Risk Management, and Compliance (GRC) platforms like Apptega, FutureFeed, or Microsoft Purview.
• Possession of certifications such as CCP, CISA, or Security+.
• Capability to collaborate with C-suite executives and client technical teams.
• Demonstrated ability to manage approximately 10 simultaneous clients/projects.
• Proficient in handling ambiguity and multiple requests.
• Skilled in managing various projects and translating business data into understandable information.
• Exceptional technical and business communication skills.
• Competitive salary and performance-based bonuses.
• Comprehensive health, dental, and vision insurance.
• Generous paid time off and holiday schedule.
• Opportunities for professional development and certification support.
• Collaborative work environment with a focus on innovation.
Guthrie
Great Gray Trust Company
Sony Interactive Entertainment
Re:Build Manufacturing
Get handpicked remote jobs straight to your inbox weekly.