Security Compliance Specialist

About Apexon:

Apexon is a digital-first technology services firm specializing in accelerating business transformation and delivering human-centric digital experiences. We have been meeting customers wherever they are in the digital lifecycle and helping them outperform their competition through speed and innovation.

Apexon brings together distinct core competencies in AI, analytics, app development, cloud, commerce, CX, data, DevOps, IoT, mobile, quality engineering, and UX, along with deep expertise in BFSI, healthcare, and life sciences, helping businesses capitalize on the unlimited opportunities digital offers.

Our reputation is built on a comprehensive suite of engineering services, a dedication to solving clients' toughest technology problems, and a commitment to continuous improvement. Backed by Goldman Sachs Asset Management and Everstone Capital, Apexon has a global presence across four continents.

We enable #HumanFirstDIGITAL

We are hiring for a Security Compliance Specialist opportunity.

Role: Security Compliance Specialist

Location: Austin, TX


Position: 1

Role Overview:

We are seeking an experienced Security Compliance Specialist to support security, privacy, risk, and compliance activities for State Government client systems. The ideal candidate will have strong expertise in NIST SP 800 53, System Security Plans, security assessments, vulnerability management, and compliance documentation. The candidate will work closely with system owners, ISSOs, auditors, development teams, and IT stakeholders to maintain security authorization and compliance requirements.

Key Responsibilities:

• Develop, update, and maintain System Security Plans (SSPs) for State Government systems

• Apply NIST SP 800 53, NIST Risk Management Framework, and applicable regulatory frameworks to assess and document security posture

• Conduct security control assessments, gap analyses, and compliance reviews

• Map assessment findings to applicable security and compliance requirements

• Prepare privacy documentation including Privacy Impact Assessments and data handling policies

• Support Authorization to Operate packages and coordinate with system owners, ISSOs, and auditors

• Track Plans of Action and Milestones and monitor remediation activities

• Maintain audit ready compliance documentation and evidence repositories

• Review vulnerability assessment results and translate findings into risk ratings and remediation actions

• Support security compliance documentation for cloud environments such as Azure Government and AWS GovCloud

• Use GitHub or similar collaboration tools to manage documentation changes

• Leverage AI tools to research and troubleshoot technical and compliance issues

• Work with development, IT, and project teams to gather information required for compliance documentation

• Document findings, procedures, risks, and remediation plans for technical and nontechnical stakeholders

• Participate in discovery sessions and provide compliance input during sprint planning

• Mentor junior team members on security compliance documentation practices

• Stay current with evolving security, privacy, and compliance frameworks

Required Skills:

• Advanced knowledge of NIST SP 800 53

• Advanced experience developing and maintaining System Security Plans

• Advanced experience conducting cyber security assessments and gap analyses

• Intermediate experience with vulnerability and patch management

• Foundation level knowledge of cloud security concepts

• Experience with NIST Risk Management Framework and security authorization processes

• Experience developing compliance and privacy documentation

• Experience supporting ATO packages, POA&Ms, and audit activities

• Strong understanding of security controls, risk assessment, remediation tracking, and compliance evidence

• Excellent technical writing, documentation, communication, and stakeholder management skills

Preferred Skills:

• Experience with FedRAMP, StateRAMP, or CJIS compliance frameworks

• Experience supporting Azure Government or AWS GovCloud environments

• Experience with vulnerability assessment platforms such as Nessus, Qualys, Tenable, or Veracode

• Experience using GitHub for documentation management and technical collaboration

• Experience with GitHub Copilot or similar AI assisted development tools

• Experience supporting State Government or public sector security programs

• Experience working with privacy assessments and data protection requirements

• Security or compliance certifications are a plus

Education Requirement:

Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Information Security, or a related field preferred. Equivalent professional experience may be considered.

Our Commitment to Diversity & Inclusion:

Did you know that Apexon has been Certified™ by Great Place To Work® in multiple global regions? Apexon is committed to being an equal opportunity employer and promoting diversity in the workplace. We take affirmative action to ensure equal employment opportunity for all qualified individuals. Apexon strictly prohibits discrimination and harassment of any kind and provides equal employment opportunities to employees and applicants without regard to gender, race, color, ethnicity or national origin, age, disability, religion, sexual orientation, gender identity or expression, veteran status, or any other characteristic protected by law.

Our Commitment to Environment:

Actively contribute to Apexon's commitment to environmental responsibility by following sustainable practices and supporting ESG initiatives.

Our Perks and Benefits:

Our benefits and rewards program has been thoughtfully designed to recognize your skills and contributions, elevate your learning experience, and provide care and support for you and your loved ones.

We also offer:

• Health Insurance with Dental & Vision

• 401K Plan

• Life Insurance, STD & LTD

• Paid Vacations & Holidays

• Continuous Skill Based Development and Career Advancement Opportunities