Security Compliance Analyst

This is a fully remote position, open to applicants in United States.

📋 Description

• Assist in the analysis of systems, programs, and planning activities within the CMM operational framework.

• Investigate policies, procedures, technical documents, and IA/Cyber-related programs and initiatives.

• Explore and evaluate options to establish relationships and solutions within the specialized area.

• Examine information assurance-related technical challenges and offer engineering and technical assistance.

• Design, develop, engineer, and implement solutions that comply with network security requirements.

• Conduct vulnerability and risk assessments of computer systems and applications throughout the system development life cycle.

• Establish and fulfill system-wide information security requirements based on user, policy, regulatory, and resource demands.

• Assist customers in formulating and executing security policies.

• Provide 24/7 supplemental monitoring and escalate critical, service-impacting issues within 30 minutes.

• Compile monthly incident and problem management reports.

• Define rules for data privacy, security, retention, and classification.

• Oversee data classification, sensitive data governance, and data sharing agreements.

• Support Authority to Operate documentation and gather necessary artifacts for ATO packages.

• Monitor performance scans and system logs; analyze and report vulnerabilities.

• Investigate and analyze security issues and incidents utilizing SIEM tools.

• Stay informed about emerging security threats and contemporary attack methods.

• Collaborate as part of the CMM Data Modernization and Governance team, supporting data governance, engineering, data platforms, reporting, analytics, and AI/ML capabilities for the U.S. Courts program.

⛳️ Requirements

• BS/BA degree with over 5 years of experience in information systems providing enterprise cybersecurity through policy, architecture, and training processes.

• Experience may be considered in lieu of a degree.

• Proven experience in developing plans to protect sensitive data from accidental or unauthorized modification, destruction, or disclosure.

• Experience working within Agile teams and SAFe methodologies.

• Experience responding to security assessments and managing vulnerability audits and assessments.

• 1–2+ years of experience with tools for identifying cloud-based security issues.

• 1–2+ years of experience using SIEM tools like Splunk for monitoring and log analysis.

• 1–2+ years of experience in incident response and forensics.

• Knowledge of contemporary security methods, vulnerabilities, and emerging threats.

• Experience with software and security testing, including containerized applications.

• Understanding of data privacy, retention, and classification requirements in a regulated environment.

• Familiarity with data governance, metadata management, and data quality practices.

• Experience with SQL for data querying and validation.

• Proficiency with BI/reporting tools such as Power BI, Tableau, or QuickSight.

• Preferred experience with cloud data platforms like Snowflake, Databricks, or AWS.

• Understanding of data architecture concepts, including data lake, lakehouse, and warehouse.

• Strong compliance mindset and ability to translate security and privacy requirements into governance guidance.

• Exceptional presentation and communication skills.

• Capability to collaborate with high-level customer stakeholders and cultivate customer relationships.

• Experience in identifying and applying industry tools, solutions, methods, best practices, and emerging technologies.

• Ability to work independently as well as part of a team.

• CISSP certification preferred.

• U.S. citizenship is not required.

• No security clearance is necessary.

🏝️ Benefits

• Options for medical plans, some of which include Health Savings Accounts.

• Options for dental plans.

• Vision plan availability.

• 401(k) plan with pre-tax and post-tax contributions, including company matching.

• Full flexible work weeks where feasible.

• Vacation, sick, and personal time off.

• Paid holidays.

• Paid parental leave.

• Military leave.

• Bereavement leave.

• Jury duty leave.

• 15 days of paid leave per calendar year for new hires, prorated based on hire date.

• 10 paid holidays per year, prorated based on hire date.

• Up to 160 hours of paid family leave within a rolling 12-month period for eligible employees.

• Short- and long-term disability benefits.

• Life insurance coverage.

• Accidental death and dismemberment insurance.

• Personal accident insurance.

• Critical illness insurance.

• Business travel and accident insurance.