Cybersecurity Compliance Analyst

Overview/ Job Responsibilities

Entarian is seeking a Cybersecurity Compliance Analyst to support Information System Security Officers (ISSOs) in maintaining cybersecurity compliance for assigned NOAA NESDIS OSPO FISMA systems. The Analyst prepares, maintains, and tracks the documentation, security evidence, and supporting records required for Continuous Monitoring and Security Control Assessments (SCAs).

The role focuses on compliance coordination, artifact readiness, assessment support, remediation tracking, and accurate status reporting. The Analyst works under the direction of the ISSO and coordinates with system and technical stakeholders to ensure required information is complete, current, and available when needed.

Key Responsibilities

• Provide day-to-day cybersecurity compliance and related systems-analysis support to assigned ISSOs and FISMA systems.
• Prepare, maintain, and update Continuous Monitoring schedules, trackers, packages, and supporting documentation.
• Collect, organize, review, and track security-control evidence and supporting artifacts for recurring compliance activities.
• Prepare SCA documentation and evidence packages and coordinate artifact requests with system and technical stakeholders.
• Maintain assessment trackers, document outstanding evidence requests, and track SCA findings through remediation and closure.
• Support creation, maintenance, and status tracking of Plans of Action and Milestones (POA&Ms), including remediation evidence and milestone updates.
• Maintain compliance calendars, action-item logs, deliverable trackers, and status reports for ISSO review.
• Coordinate with System Owners, engineers, system administrators, and other stakeholders to obtain required compliance documentation and evidence.
• Review cybersecurity documentation and artifacts for completeness, consistency, currency, and readiness for Government or assessor review.
• Maintain accurate cybersecurity records and compliance information in JSAM and other Government-designated repositories and tracking tools.
• Identify missing, overdue, or incomplete compliance items and escalate risks, deficiencies, or schedule concerns to the ISSO.
• Support recurring compliance meetings, data calls, assessment activities, and status reporting as directed by the ISSO.
• Support NIST RMF and A&A/ATO activities by developing, updating, and quality-reviewing cybersecurity documentation, including System Securi
• ents, and authorization artifacts.
• Review system Change Requests and support preparation and tracking of Security Threshold Analysis (STA) and Security Impact Analysis (SIA) documentation and related security-documentation updates.
• Review vulnerability findings and track patching, configuration hardening, remediation actions, supporting evidence, and related POA&M updates for ISSO review.
• Support audit and assessment readiness by maintaining complete, current, and traceable documentation and evidence for internal and external reviews, assessments, inspections, and authorization activities.

This position supports work at NOAA's Suitland, MD facility with limited telework permitted.


The salary range for this role is $105,000 - 115,000/year.

Minimum Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, Information Systems, Computer Science, Engineering, or a related field, or equivalent experience as permitted by the applicable labor category.
• Experience supporting cybersecurity compliance, FISMA systems, security documentation, Continuous Monitoring, Security Control Assessments, or related RMF activities.
• Working knowledge of NIST RMF, NIST SP 800-53, FIPS 199/200, A&A/ATO, Continuous Monitoring, POA&M management, and Security Control Assessment processes.
  Strong documentation, organization, quality-review, tracking, and stakeholder-coordination skills.
• Ability to manage multiple compliance activities and deadlines while maintaining accurate records and supporting evidence.
• Secret clearance eligible.
• CompTIA Security+ required. Additional certifications such as CGRC, CISA, CISM, CISSP, or relevant cloud-security certifications are desirable.

About Us

Compensation We consider several factors when extending an offer of employment, including the location, scope, and associated responsibilities of the specific position, as well as a candidate's work experience, education/training, and key skills.

Benefits
All full-time employees are eligible to participate in our flexible benefits package, which includes:

• Medical, Rx, Dental, and Vision Insurance
• 401(k) retirement plan with company-matching
• 11 Paid Federal Government Holidays
• Paid Time Off (PTO)
• Basic Life & Supplemental Life
• Health Savings Account, Flexible Spending and Dependent Care Flexible Spending Accounts
• Short-Term & Long-Term Disability
• Employee assistance program (EAP)
• Tuition Reimbursement, Personal Development & Learning Opportunities
• Skills Development & Certifications
• Professional Membership Reimbursement
• Employee Referral Program
• Competitive compensation plan
• Discretionary variable incentive bonuses based on factors such as individual performance, business unit performance, and/or the company's performance

Formed through the strategic union of Sev1Tech and ERT, Entarian is a premier provider of mission-critical engineering and technology solutions. Founded on a legacy of excellence dating back to 1993, Entarian is a product of an evolved and fully diversified engineering and federal technology leader. From deep space to defense and civilian missions, Entarian delivers secure, mission-aligned digital solutions that drive national resilience and operational effectiveness. We don't just support modernization; we define it.

Join the Mission and Start your Career Journey: Apply Directly via our Careers Portal Connect, Referrals & Inquiries? Email the team: View email address on click.appcast.io

Entarian is an Equal Opportunity and Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, national origin, age, protected veteran status, or disability status.